# changelog

author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.1-7
changelog:
  - Bump version to 1.3.10.1-7
  - Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-1
changelog:
  - Bump version to  1.3.10.2-1
  - Resolves: Bug 1724761 - Entry cache contention during base search
  - Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
  - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
  - Resolves: Bug 1762901 - cenotaph errors on modrdn operations
  - Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
  - Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
  - Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
  - Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
  - Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
  - Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  - Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
  - Resolves: Bug 1796558 - Memory leak in ACI using IP subject
  - Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-2
changelog:
  - Bump version to  1.3.10.2-2
  - Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
  - Resolves: Bug 1801327 - intermittent SSL hang with rhds
  - Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
  - Resolves: Bug 1827284 - Memory leak in indirect COS


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-3
changelog:
  - Bump version to 1.3.10.2-3
  - Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
  - Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-5
changelog:
  - Bump version to 1.3.10.2-5
  - Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-6
changelog:
  - Bump version to 1.3.10.2-6
  - Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-7
changelog:
  - Bump version to 1.3.10.2-7
  - Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  - Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
  - Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-8
changelog:
  - Bump version to 1.3.10.2-8
  - Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
  - Resolves: Bug 1902042 - Entries conflict not resolved by replication


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10.2-10
changelog:
  - Bump version to 1.3.10.2-10
  - Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
  - Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
  - Resolves: Bug 1881968 - Replication Lag under high load


author: Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-11
changelog:
  - Bump version to 1.3.10.2-11
  - Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
  - Resolves: Bug 1931182 - information disclosure during the binding of a DN


author: Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-13
changelog:
  - Bump version to 1.3.10.2-13
  - Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
  - Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
  - Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
  - Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule


author: Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-14
changelog:
  - Bump version to 1.3.10.2-14
  - Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
  - Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&(memberOf=...)(objectClass=ipaHost)` in particular)


author: Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-15
changelog:
  - Bump version to 1.3.10.2-15
  - Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
  - Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search


author: Thierry Bordaz <tbordaz@redhat.com> - 1.3.10.2-16
changelog:
  - Bump version to 1.3.10.2-16
  - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
  - Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
  - Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
  - Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.10-2-17
changelog:
  - Bump version to 1.3.10.2-17
  - Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
  - Resolves: Bug 2131083 - SIGSEGV in sync_repl


author: Simon Pichugin <spichugi@redhat.com> - 1.3.11.1-1
changelog:
  - Bump version to 1.3.11.1-1
  - Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
  - Resolves: Bug 2170221 - Boolean attributes should be case insensitive
  - Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use


author: Shakthi Kannan <shakthimaan [AT] fedoraproject dot org> 2.1.2-6
changelog:
  - Changed Group to System Environment/Libraries.
  - Remove executable permission from C files.
  - Created two separate patches for Makefile and manpage fixes.
  - Removed passing datarootdir from configure.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.1.3-8
changelog:
  - Add %_isa to -devel base package dependency.
  - Headers get installed by "make install", copying them from the HTML
    doc headers dir is not necessary.
  - Configure build with --disable-static.
  - Drop unneeded spec stuff (buildroot def, removal, clean, pkgconfig dep).
  - Using %defattr is not needed anymore.
  - Deduplicate documentation files in unversioned docdir (#1001276).


author: Petr Machata <pmachata@redhat.com> - 2.2.2-29
changelog:
  - Tell GCC not to recognize builtins when compiling efence.c.
  - Resolves: #631316
  - Related: #632312


author: Philip Prindeville <philipp@fedoraproject.org> - 1.5.0-1
changelog:
  - Version bump to 1.5.0
  - Have GeoIP.dat be a symlink to the real data, and install the canned
    GeoIP.dat as GeoIP-initial.dat
  - Change config as per Boris' instructions to use 'lite' databases which are
    regularly updated.
  - Add pkgconfig (.pc) file into devel subpackage
  - Add cron support for refreshing the lite databases and make a separate
    subpackage.


author: Paul Howarth <paul@city-fan.org> - 1.5.0-5
changelog:
  - Make GeoIP.dat -> GeoIP-initial.dat symlink in %install, not %post,
    and don't %ghost it
  - Run geoipupdate silently in %post and cron job
  - Create empty database files for %ghost to work with old rpm versions
  - Don't try to use noarch subpackages on old rpm versions
  - Update %description to mention database updates
  - Drop outdated README.Fedora


author: Jan Safranek <jsafrane@redhat.com> - 1.5.0-7
changelog:
  - Don't download the database in %post (#1029807)
  - Don't download GeoLiteASNum as it's no longer provided.


author: Jan Safranek <jsafrane@redhat.com> - 1.5.0-10
changelog:
  - Added base IPv6 database to GeoIP package
  - Added GeoIP-data subpackage with all other databases (#1201857)


author: Michal Ruprich <mruprich@redhat.com> - 1.5.0-12
changelog:
  - Removed clean section
  - Resolves: #1589860 - Update GeoIP legacy databases
  - Resolves: #1409060 -  Missing symlink at the GeoIP-update package


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 6.7.8.9-7
changelog:
  - add aarch64 as a target by using 32 set by platform, instead of hardcoding the list of 64-bit arches (rhbz#1028584)


author: Jan Horak <jhorak@redhat.com> - 6.7.8.9-15
changelog:
  - Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
    rhbz#1326834, rhbz#1334188, rhbz#1269553


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 6.7.8.9-7
changelog:
  - add aarch64 as a target by using 64 set by platform, instead of hardcoding the list of 64-bit arches (rhbz#1028584)


author: Jai S <jsathyapalan@cloudlinux.com> - 6.9.10.68-7.0.3.tuxcare.els4
changelog:
  - CVE-2025-68618: fix DOS when processing a specially crafted malicious SVG file
  - CVE-2025-69204: fix DOS due to buffer overflow during image processing of a specially
    crafted SVG image


author: Bartosz Staszewski <bstaszewski@cloudlinux.com> - 6.9.10.68-7.0.3.tuxcare.els5
changelog:
  - CVE-2026-25798: fix NULL pointer dereference in ClonePixelCacheRepository
  - CVE-2026-24481: fix heap information disclosure in PSD handler
  - CVE-2026-25799: fix division-by-zero in YUV sampling factor validation
  - CVE-2026-26284: fix out-of-bounds read in PCD Huffman decoder
  - CVE-2026-25897: fix integer overflow in Sun decoder on 32-bit systems
  - CVE-2026-26066: fix infinite loop in IPTCTEXT profile writing
  - CVE-2026-26283: fix infinite loop in JPEG encoder extent binary search
  - CVE-2026-25795: fix NULL pointer dereference in ReadSFWImage
  - CVE-2026-25796: fix memory leak in ReadSTEGANOImage


author: Bartosz Staszewski <bstaszewski@cloudlinux.com> - 6.9.10.68-7.0.3.tuxcare.els6
changelog:
  - CVE-2026-25797: fix PostScript/HTML code injection via unsanitized filenames
  - CVE-2026-25982: fix heap out-of-bounds read in DICOM colormap decoder
  - CVE-2026-25968: fix stack buffer overflow in MSL opacity attribute processing
  - CVE-2026-25986: fix heap buffer overflow write in YUV 4:2:2 decoder
  - CVE-2026-25987: fix heap buffer over-read in MAP image decoder
  - CVE-2026-25970: fix signed integer overflow in SIXEL decoder
  - CVE-2026-23952: fix NULL pointer dereference in MSL comment/label handlers
  - CVE-2026-30883: fix heap buffer overflow in PNG profile writer
  - CVE-2026-25988: fix MSL stack index not updated causing memory leak
  - CVE-2026-27798: fix heap buffer over-read in WaveletDenoiseImage
  - CVE-2026-25965: fix path traversal bypassing security policy


author: Bartosz Staszewski <bstaszewski@cloudlinux.com> - 6.9.10.68-7.0.3.tuxcare.els9
changelog:
  - CVE-2026-28494: fix stack buffer overflow in morphology kernel parsing
  - CVE-2026-28691: fix uninitialized pointer dereference in JBIG decoder
  - CVE-2026-25989: fix off-by-one boundary check in CastDoubleToLong
  - CVE-2026-25985: fix memory allocation without limits in SVG decoder
  - CVE-2026-24485: fix infinite loop in PCD decoder
  - CVE-2025-66628: fix integer overflow in TIM decoder on 32-bit systems
  - CVE-2026-28693: fix integer overflow in DIB/BMP coder


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 6.9.10.68-7.0.3.tuxcare.els12
changelog:
  - CVE-2026-33900: fix integer truncation in viff encoder leading to
    heap out-of-bounds write on 32-bit builds
  - CVE-2026-33905: fix out-of-bounds read in -sample operation via
    sample:offset define
  - CVE-2026-34238: fix integer overflow in despeckle operation causing
    heap buffer overflow on 32-bit builds
  - CVE-2026-40310: fix heap out-of-bounds write in JP2 encoder on
    invalid sampling index
  - CVE-2026-40311: fix heap use-after-free reading and printing values
    from an invalid XMP profile


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 6.9.10.68-7.0.3.tuxcare.els13
changelog:
  - CVE-2026-42050: fix stack-based buffer overflow in XTileImage() triggered by a malicious MIFF file when right-clicking a tile to invoke the Load / Update menu item


author: Areg Gasparyan <agasparyan@cloudlinux.com> - 6.9.10.68-7.0.3.tuxcare.els14
changelog:
  - CVE-2026-46692: validate distributed pixel cache region on read and
    write to prevent a heap buffer over-write


author: Andrija Jokanovic <ajokanovic@cloudlinux.com> - 6.9.10.68-7.0.3.tuxcare.els15
changelog:
  - CVE-2026-46559: fix heap buffer overflow (out-of-bounds write) in JP2
    encoder by bounding tcp_distoratio and tcp_rates option parsing to array
    extents


author: Andrija Jokanovic <ajokanovic@cloudlinux.com> - 6.9.10.68-7.0.3.tuxcare.els16
changelog:
  - CVE-2026-49218: fix denial of service in DICOM reader by rejecting an
    image decoded with zero columns or rows


author: Viktor Borzov <vborzov@cloudlinux.com> - 6.9.10.68-7.0.3.tuxcare.els17
changelog:
  - CVE-2026-53460: fix unbounded memory allocation in AcquireAlignedMemory() leading to out-of-memory denial of service


author: Pavel Kopylov <pkopylov@cloudlinux.com> - 6.9.10.68-7.0.3.tuxcare.els18
changelog:
  - CVE-2026-42326: fix out-of-bounds read of a single byte when writing an
    IPTC output file
  - CVE-2026-45624: fix out-of-bounds over-read during polynomial distortion
    with crafted arguments
  - CVE-2026-46521: fix out-of-bounds write in the MIFF encoder when using
    LZMA compression
  - CVE-2026-48734: fix stack overflow via a crafted MVG file by adding a
    recursion-depth check in class-macro expansion
  - CVE-2026-48994: fix heap buffer over-write in the MAT decoder on 32-bit
    systems due to a missing return-value check


author: Pavel Kopylov <pkopylov@cloudlinux.com> - 6.9.10.68-7.0.3.tuxcare.els19
changelog:
  - CVE-2026-33901: fix heap buffer overflow (out-of-bounds write) in the MVG
    decoder when copying an over-long token into a fixed-size buffer
  - CVE-2026-33908: fix stack exhaustion denial of service in DestroyXMLTree()
    by imposing a recursion depth limit on deeply nested XML
  - CVE-2026-45031: fix list-length resource policy bypass in the PSD decoder
    by validating the layer count against the list limit
  - CVE-2026-45664: fix excessive resource use in the MNG coder by bounding the
    number of LOOP/ENDL operations
  - CVE-2026-46520: fix heap out-of-bounds write in the IPL coder when writing
    multiple images with differing dimensions
  - CVE-2026-46522: fix infinite loop (CPU exhaustion) in the MIFF decoder on a
    crafted file
  - CVE-2026-46523: fix heap use-after-free in the MSL coder by disabling blob
    support for the MSL format


author: Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 6.9.10.68-7.0.3.tuxcare.els20
changelog:
  - CVE-2026-56361: out-of-bounds access in AcquireKernelBuiltIn() when a user
    kernel offset equals the kernel width or height
  - CVE-2026-56367: heap overflow from an unchecked rows*channels multiplication
    in the PSD RLE size reader
  - CVE-2026-56368: memory leak of the quantum info buffer in the raw pixel
    writers (bgr, cmyk, gray, rgb, ycbcr) on output blob reopen failure
  - CVE-2026-56370: out-of-bounds write in ConnectedComponentsImage() via crafted
    connected-components:keep and :remove index ranges
  - CVE-2026-56378: out-of-bounds read in the PCD Huffman decoder from an
    unbounded output pointer


author: Viktor Borzov <vborzov@cloudlinux.com> - 6.9.10.68-7.0.3.tuxcare.els21
changelog:
  - CVE-2025-43965: fix incorrect buffer size calculation (CWE-131) in the MIFF
    decoder caused by image depth not being resynchronized after SetQuantumFormat


author: Dmitrii Samoilov <dsamoilov@cloudlinux.com> - 6.9.10.68-7.0.3.tuxcare.els22
changelog:
  - CVE-2026-61857: check ResizeQuantumMemory() return value in ParseEntities()
    (magick/xml-tree.c) to avoid a NULL-pointer dereference
  - CVE-2026-61863: destroy the huffman_image clone on temp-file open failure in
    WriteGROUP4Image() (coders/tiff.c) to fix a memory leak
  - CVE-2026-61870: relinquish pixel_info before throwing on colormap allocation
    failure in WriteVIFFImage() (coders/viff.c) to fix a memory leak


author: Charles R. Anderson <cra@wpi.edu> - 1.0.4-4
changelog:
  - For Judy1 man page fix, patch Makefile.{am,in} instead of
    relying on autotools to regenerate the latter
  - Add README.Fedora with upstream's license explanation


author: Paul Howarth <paul@city-fan.org> - 1.0.5-1
changelog:
  - Update to 1.0.5
    - Added proper clean targets to enable multiple builds
    - Added examples directory
    - Correctly detects 32/64-bit build environment
    - Allow explicit configure for 32/64-bit environment
  - Cosmetic spec file clean-ups


author: Paul Howarth <paul@city-fan.org> - 1.0.5-8
changelog:
  - Fix some code with undefined behavior
  - Build with -fno-strict-aliasing
  - Disable various compiler tree optimizations that trigger reproducible
    crashes in gtkwave without generating compiler warnings (#1064090)


author: Dan Williams <dcbw@redhat.com> - 0.7.991-2.git20130710
changelog:
  - Handle PNP connected devices
  - Fall back to AT for messaging if QMI modem doesn't support the WMS service
  - Fix IPv6 bearer creation for HSO devices
  - Fix detection of supported modes on Icera-based modems
  - Fix handling of some Icera-based modems with limited capability ports
  - Add support for Olivetti Olicard 200


author: Tom Lane <tgl@redhat.com> 1.2.3-1
changelog:
  - Update to final release of 1.2.3
  Resolves: #660484
  - Rebuild was needed anyway for mysql ABI break (no more libmysqlclient_r)


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.9.9.1-17.git20140326
changelog:
  - core: fix connection matching generally and for s390 as well (rh #1083196)
  - dhcp: fix DHCPv6 address lifetime handling (rh #1086237)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-0.2.20190404git9a8fe5f339
changelog:
  - Update to a 1.18 snapshot:
  - clients: only ask secrets for settings that require them (rh #1506536)
  - checkpoint: remove a device from checkpoint if it disappears (rh #1578335)
  - lldp: support more VLAN TLVs (rh #1652211)
  - bridge: add VLAN filtering support (rh #1652910)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-0.3.20190408git43d9187c14
changelog:
  - infiniband: allow large MTU (rh #1534869) (rh #1653494)
  - sr-iov: tolerate lack of sriov_drivers_autoprobe sysfs property (rh #1695093)


author: Francesco Giudici <fgiudici@redhat.com> - 1:1.18.0-0.4.20190408git43d9187c14
changelog:
  - keyfile: ensure keyfiles don't get a .nmconnection file name extension (rh#1697858)
  - dhcp: preserve legacy dhcp-client-id default for internal dhcp (rh #1695723)


author: Thomas Haller <thaller@redhat.com> - 1:1.18.0-1
changelog:
  - Update to 1.18.0 release
  - cli: fix crash handling gsm secrets (rh #1698495)
  - rules: fix duplicate policy routing rules (rh #1652653)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-2
changelog:
  - cli: hide certificate blobs unless --show-secrets is passed (rh #1702199)
  - device: fix reapply of MTU (rh #1702657)
  - settings: fix failed assertion when adding connections (rh #1707261)
  - core: ensure software devices are managed when networking gets enabled (rh #1701585)
  - device: restore IPv6 configuration on link up (rh #1548237)
  - dbus: fix return value for LoadConnection and avoid assertion for relative path (rh #1708660)
  - core: fix file permissions of /var/lib/NetworkManager/secret_key (rh #1709849)
  - tc: add suppor for mired action an fq_codel qdisc (rh #1546802)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.18.0-3
changelog:
  - team: don't kill teamd for external devices (rh #1711952)
  - ifcfg-rh: use PKCS#12 private key also as client certificate in reader (rh #1714610)
  - po: update translations (rh #1689962)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.0-4
changelog:
  - cli: don't wait forever in the editor on update connection failure (rh #1702203)
  - team: fix setting validate_active, validate_inactive and send_always flags (rh #1720153)


author: Thomas Haller <thaller@redhat.com> - 1:1.18.4-1
changelog:
  - Update to 1.18.4 release
  - cli: fix bash completion for slave-types (rh #1654062)
  - core: improve handling of policy routing rules when restarting daemon (rh #1696881)
  - ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
  - tui: only add bond options to profile that are supported by tui (rh #1715720)
  - cli: fix resetting default value for properties (rh #1715887)
  - core: fix detecting parent device by connection's UUID (rh #1716438)
  - core: fix setting IPv6 route options and destination (rh #1727193)
  - core: support more "arp_validate" bond options (rh #1730793)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.4-2
changelog:
  - dhcp: include conditionals from existing dhclient configuration (rh #1758550)
  - core: fix sending ARP announcements (rh #1767681)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.18.6-1
changelog:
  - Update to 1.18.6 release
  - cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
  - core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
  - core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)


author: Thomas Haller <thaller@redhat.com> - 1:1.18.6-2
changelog:
  - vpn: gracefully handle invalid routes from VPN plugins
  - workaround g_strtoll() failing with EAGAIN (rh #1797915)


author: Thomas Haller <thaller@redhat.com> - 1:1.18.8-1
changelog:
  - Update to 1.18.8 relase
  - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
  - ifcfg-rh: handle 802-1x.pin properties.


author: Thomas Haller <thaller@redhat.com> - 1:1.18.8-2
changelog:
  - Backport OVS related fixes (rh #1871935)
  - ovs: support changing the MTU of ovs interfaces (rh #1820052)
  - ovs: fix race condition in setting MAC address (rh #1852106)


author: Thomas Haller <thaller@redhat.com> - 1:1.0.0-7.git20150107.1ea95cd3
changelog:
  - platform: fix handling of routes with special metric (rh #1172780)
  - ifcfg-rh: add reading and writing of route-metric property


author: Dan Williams <dcbw@redhat.com> - 1:1.0.0-9.git20150121.b4ea599c
changelog:
  - build: fix NetworkManager-libnm and old NetworkManager-glib conflict (rh #1066690)
  - core: accept numeric bond options (rh #1171009) (rh #1133544)
  - core/libnm: better validate setting properties (rh #1182567)
  - core: add dispatcher script to support policy based routing (rh #1160013)


author: Dan Williams <dcbw@redhat.com> - 1:1.0.0-13.git20150121.b4ea599c
changelog:
  - core: remove IPv6LL address when deactivating managed devices (rh #1184997)
  - core: recognize external IP config earlier on startup
  - core: fix bridge default metric


author: Thomas Haller <thaller@redhat.com> - 1:1.0.6-22
changelog:
  - platform: fix detection of s390 CTC device (rh #1272974)
  - core: fix queuing activation while waiting for carrier (rh #1079353)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.0.6-25
changelog:
  - vpn: cancel the secrets request on agent timeout (rh #1272023)
  - vpn: cancel the connect timer when vpn reconnects (rh #1272023)


author: Thomas Haller <thaller@redhat.com> - 1:1.4.0-3
changelog:
  - wifi: fix activation failure due to error changing MAC address (rh#1371623)
  - core: fix wrong source interface for PropertiesChanged D-Bus signal (rh#1371920)
  - team: restore validation of JSON configuration (rh#1371967)
  - device: manage firewall zone for assumed persistent connections (rh#1366288)
  - device: don't let external changes cause a release of the slave (rh#1357738)


author: Thomas Haller <thaller@redhat.com> - 1:1.4.0-5
changelog:
  - libnm,nmtui: fix handling empty cloned-mac-address property (rh#1372799)
  - ibft: grant required CAP_SYS_ADMIN capabilities (rh#1371201)


author: Thomas Haller <thaller@redhat.com> - 1:1.4.0-7
changelog:
  - wifi: another fix activation failure due to error changing MAC address (rh#1371623, rh#1374023)
  - dhcp: fix race condition that may cause lost lease events and DHCP timeouts (rh#1373276)


author: Thomas Haller <thaller@redhat.com> - 1:1.4.0-8
changelog:
  - libnm: fix crash in nm_vpn_plugin_info_list_get_service_types() (rh#1374526)
  - device: wait for MAC address change before setting up interface (rh#1371623, rh#1374023)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.4.0-9
changelog:
  - clients: handle secret requests only for current connection (rh#1351272)
  - device: fix crash reapplying connection to slave devices (rh#1376784)
  - cli: fix autocompletion after ifname (rh#1375933)


author: Francesco Giudici <fgiudici@redhat.com> - 1:1.4.0-16
changelog:
  - libnm-core: remove INFERRABLE flag from dhcp-hostname property (rh#1421082)
  - core: honor order of IP addresses from configuration (rh#1394500)


author: Avesh Agarwal <avagarwa@redhat.com> - 0.9.8.0-2
changelog:
  - Fixed rhbz#921061
  - Fixed rhbz#999353
  - Fixed rhbz#1035786
  - Fixed rhbz#1014830
  - Fixes 1035786 (and its duplicate 1040924)
  - Fixed 926225
  - Fixed dependency to libreswan.
  - Created a new sub package NetworkManager-openswan-gnome
  - Various other spec file fixes.
  - Additional code changes are as follows:
  - Fixed an issue where proper network stack is not loaded unless
    _stackmanager is run before starting pluto daemon service.
  - Fixed the termination operation of pluto daemon to comply with
    libreswan changes.
  - Fixed various debug messages.
  - Fixed initiation of pluto daemon by this plugin to reflect the
    changes in libreaswan.
  - Fixed defaults values for more parameters to help the VPN
    connection stay more reliable.
  - Rewrote pluto watch API which watches the pluto process for its status.
    Fixed memory leak issues as not all child processes were reaped correctly.
    Also g_spwan_close_pid was not being called after children were reaped.
    Also modified debugs and added more to help with debugging in the future.
  - Fixed an issue where nm-openswan service is searching for ipsec binary in
    both /sbin and /usr/sbin leading to same operation twice, as /sbin is just
    symlink to /usr/sbin, so removed /sbin from the search paths.
  - Fixed some libreswan related macro changes.
  - Fixed netmask issue when sending IP information to the nm openswan
    plugin service.
  - Fixed the current code as it does not set the default route field
    NM_VPN_PLUGIN_IP4_CONFIG_NEVER_DEFAULT when sending VPN information
    to nm-openswan plugin. This fix sets the field to TRUE.
  - Fixed some issues found by coverity scan.
  - Fixed an issue where writing configuration on stdin should not end with
    \n as it gives error. It used to work previously, but not with latest
    NetworkManager versions.
  - libreswan related fixes, as some macros have been modified after forking
    to libreswan from openswan.
  - openswan/libreswan does not provide tun0 interface, so fixed the code
    where it sends tun0 interface.
  - Fix prcoessing of nm-openswan-dialog.ui file and added more error notifications.
  - Fixed dead code based on coverity scan.
  - Fixed gnomekeyring lib dependencies.
  - Fixed Networkmanager and related lib dependencies.
  - Fixed gtk label max width issue by setting it to 35.
  - NM-openswan was missing support for nm-openswan-auth-dialog.desktop.in.in.
    So added a new nm-openswan-auth-dialog.desktop.in.in, and modified related
    Makefile and configure.ac files.


author: Lubomir Rintel <lrintel@redhat.com> - 1.2.0-0.1.beta3
changelog:
  - Update to 1.2-beta3:
  - Added support for main exchange type (rh #1292912)
  - A device libreswan is unable listen on no longer aborts connection (rh #1285367)
  - Added import/export support (rh #1129878)
  - Replace NetworkManager-openswan (rh #1264552)


author: Thomas Haller <thaller@redhat.com> - 1.2.4-1
changelog:
  - Update to 1.2.4 release
  - Move base VPN plugin library to base libreswan package
  - Don't require nm-connection-editor anymore


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160419-1.git90bb4c5.el7
changelog:
  - FatPkg is under the 2-clause BSDL now; "ovmf" has become OSS
  - upgrade to openssl-1.0.2g
  - Resolves: bz#1323363
    (remove "-D SECURE_BOOT_ENABLE" from AAVMF)
  - Resolves: bz#1257882
    (FEAT: support to boot from virtio 1.0 modern devices)
  - Resolves: bz#1308678
    (clearly separate SB-less, SMM-less OVMF binary from SB+SMM OVMF binary)


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160419-2.git90bb4c5.el7
changelog:
  - Submit scratch builds from the exploded tree again to
    supp-rhel-7.3-candidate, despite FatPkg being OSS at this point; see
    bz#1329559.


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160608-1.git988715a.el7
changelog:
  - Resolves: bz#1341733
    (prevent SMM stack overflow in OVMF while enrolling certificates in "db")
  - Resolves: bz#1257882
    (FEAT: support to boot from virtio 1.0 modern devices)
  - Resolves: bz#1333238
    (Q35 machine can not boot up successfully with more than 3 virtio-scsi
    storage controller under switch)
  - Resolves: bz#1330955
    (VM can not be booted up from hard disk successfully when with a passthrough
    USB stick)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20160608-2.git988715a.el7
changelog:
  - ovmf-ArmPkg-ArmGicV3Dxe-configure-all-interrupts-as-non-s.patch [bz#1349407]
  - ovmf-ArmVirtPkg-PlatformBootManagerLib-Postpone-the-shell.patch [bz#1353689]
  - Resolves: bz#1349407
    (AArch64: backport fix to run over gicv3 emulation)
  - Resolves: bz#1353689
    (AAVMF: Drops to shell with uninitialized NVRAM file)


author: Miroslav Rezanina <mrezanin@redhat.com> - OVMF-20160608-3.git988715a.el7
changelog:
  - ovmf-MdePkg-PCI-Add-missing-PCI-PCIE-definitions.patch [bz#1332408]
  - ovmf-ArmPlatformPkg-NorFlashDxe-accept-both-non-secure-an.patch [bz#1353494]
  - ovmf-ArmVirtPkg-ArmVirtQemu-switch-secure-boot-build-to-N.patch [bz#1353494]
  - ovmf-ArmPlatformPkg-NorFlashAuthenticatedDxe-remove-this-.patch [bz#1353494]
  - ovmf-ArmVirtPkg-add-FDF-definition-for-empty-varstore.patch [bz#1353494]
  - ovmf-redhat-package-the-varstore-template-produced-by-the.patch [bz#1353494]
  - ovmf-ArmVirtPkg-Re-add-the-Driver-Health-Manager.patch [bz#1353494]
  - ovmf-ArmVirtPkg-HighMemDxe-allow-patchable-PCD-for-PcdSys.patch [bz#1353494]
  - ovmf-ArmVirtPkg-ArmVirtQemuKernel-make-ACPI-support-AARCH.patch [bz#1353494]
  - ovmf-ArmVirtPkg-align-ArmVirtQemuKernel-with-ArmVirtQemu.patch [bz#1353494]
  - ovmf-ArmVirtPkg-ArmVirtQemu-factor-out-shared-FV.FvMain-d.patch [bz#1353494]
  - ovmf-ArmVirtPkg-factor-out-Rules-FDF-section.patch [bz#1353494]
  - ovmf-ArmVirtPkg-add-name-GUIDs-to-FvMain-instances.patch [bz#1353494]
  - ovmf-OvmfPkg-add-a-Name-GUID-to-each-Firmware-Volume.patch [bz#1353494]
  - ovmf-OvmfPkg-PlatformBootManagerLib-remove-stale-FvFile-b.patch [bz#1353494]
  - ovmf-MdePkg-IndustryStandard-introduce-EFI_PCI_CAPABILITY.patch [bz#1332408]
  - ovmf-MdeModulePkg-PciBusDxe-look-for-the-right-capability.patch [bz#1332408]
  - ovmf-MdeModulePkg-PciBusDxe-recognize-hotplug-capable-PCI.patch [bz#1332408]
  - ovmf-OvmfPkg-add-PciHotPlugInitDxe.patch [bz#1332408]
  - ovmf-ArmPkg-ArmGicLib-manage-GICv3-SPI-state-at-the-distr.patch [bz#1356655]
  - ovmf-ArmVirtPkg-PlatformBootManagerLib-remove-stale-FvFil.patch [bz#1353494]
  - ovmf-OvmfPkg-EnrollDefaultKeys-assign-Status-before-readi.patch [bz#1356913]
  - ovmf-OvmfPkg-EnrollDefaultKeys-silence-VS2015x86-warning-.patch [bz#1356913]
  - ovmf-CryptoPkg-update-openssl-to-ignore-RVCT-3079.patch [bz#1356184]
  - ovmf-CryptoPkg-Fix-typos-in-comments.patch [bz#1356184]
  - ovmf-CryptoPkg-BaseCryptLib-Avoid-passing-NULL-ptr-to-fun.patch [bz#1356184]
  - ovmf-CryptoPkg-BaseCryptLib-Init-the-content-of-struct-Ce.patch [bz#1356184]
  - ovmf-CryptoPkg-OpensslLib-Upgrade-OpenSSL-version-to-1.0..patch [bz#1356184]
  - Resolves: bz#1332408
    (Q35 machine can not hot-plug scsi controller under switch)
  - Resolves: bz#1353494
    ([OVMF] "EFI Internal Shell" should be removed from "Boot Manager")
  - Resolves: bz#1356184
    (refresh embedded OpenSSL to 1.0.2h)
  - Resolves: bz#1356655
    (AAVMF: stop accessing unmapped gicv3 registers)
  - Resolves: bz#1356913
    (fix use-without-initialization in EnrollDefaultKeys.efi)


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20160608b-1.git988715a.el7
changelog:
  - rework downstream-only commit dde83a75b566 "setup the tree for the secure
    boot feature (RHEL only)", excluding patent-encumbered files from the
    upstream OpenSSL 1.0.2g tarball [bz#1374710]
  - rework downstream-only commit dfc3ca1ee509 "CryptoPkg/OpensslLib: Upgrade
    OpenSSL version to 1.0.2h", excluding patent-encumbered files from the
    upstream OpenSSL 1.0.2h tarball [bz#1374710]


author: Laszlo Ersek <lersek@redhat.com> - ovmf-20170228-1.gitc325e41585e3.el7
changelog:
  - Rebase to upstream c325e41585e3 [bz#1416919]
  - Resolves: bz#1373812
    (guest boot from network even set 'boot order=1' for virtio disk with OVMF)
  - Resolves: bz#1380282
    (Update OVMF to openssl-1.0.2k-hobbled)
  - Resolves: bz#1412313
    (select broadcast SMI if available)
  - Resolves: bz#1416919
    (Rebase OVMF for RHEL-7.4)
  - Resolves: bz#1426330
    (disable libssl in CryptoPkg)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-2.gitc325e41585e3.el7
changelog:
  - ovmf-MdeModulePkg-Core-Dxe-downgrade-CodeSegmentCount-is-.patch [bz#1433428]
  - Resolves: bz#1433428
    (AAVMF: Fix error message during ARM guest VM installation)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-3.gitc325e41585e3.el7
changelog:
  - ovmf-ArmVirtPkg-FdtClientDxe-supplement-missing-EFIAPI-ca.patch [bz#1430262]
  - ovmf-ArmVirtPkg-ArmVirtPL031FdtClientLib-unconditionally-.patch [bz#1430262]
  - ovmf-MdeModulePkg-RamDiskDxe-fix-C-string-literal-catenat.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-EDKII-Platform-Has-ACPI-GUID.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-PlatformHasAcpiLib.patch [bz#1430262]
  - ovmf-EmbeddedPkg-introduce-EDKII-Platform-Has-Device-Tree.patch [bz#1430262]
  - ovmf-ArmVirtPkg-add-PlatformHasAcpiDtDxe.patch [bz#1430262]
  - ovmf-ArmVirtPkg-enable-AcpiTableDxe-and-EFI_ACPI_TABLE_PR.patch [bz#1430262]
  - ovmf-ArmVirtPkg-FdtClientDxe-install-DT-as-sysconfig-tabl.patch [bz#1430262]
  - ovmf-ArmVirtPkg-PlatformHasAcpiDtDxe-don-t-expose-DT-if-Q.patch [bz#1430262]
  - ovmf-ArmVirtPkg-remove-PURE_ACPI_BOOT_ENABLE-and-PcdPureA.patch [bz#1430262]
  - Resolves: bz#1430262
    (AAVMF: forward QEMU's DT to the guest OS only if ACPI payload is unavailable)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-4.gitc325e41585e3.el7
changelog:
  - ovmf-ShellPkg-Shell-clean-up-bogus-member-types-in-SPLIT_.patch [bz#1442908]
  - ovmf-ShellPkg-Shell-eliminate-double-free-in-RunSplitComm.patch [bz#1442908]
  - Resolves: bz#1442908
    (Guest hang when running a wrong command in Uefishell)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20170228-5.gitc325e41585e3.el7
changelog:
  - ovmf-OvmfPkg-EnrollDefaultKeys-update-SignatureOwner-GUID.patch [bz#1443351]
  - ovmf-OvmfPkg-EnrollDefaultKeys-expose-CertType-parameter-.patch [bz#1443351]
  - ovmf-OvmfPkg-EnrollDefaultKeys-blacklist-empty-file-in-db.patch [bz#1443351]
  - ovmf-OvmfPkg-introduce-the-FD_SIZE_IN_KB-macro-build-flag.patch [bz#1443351]
  - ovmf-OvmfPkg-OvmfPkg.fdf.inc-extract-VARS_LIVE_SIZE-and-V.patch [bz#1443351]
  - ovmf-OvmfPkg-introduce-4MB-flash-image-mainly-for-Windows.patch [bz#1443351]
  - ovmf-OvmfPkg-raise-max-variable-size-auth-non-auth-to-33K.patch [bz#1443351]
  - ovmf-OvmfPkg-PlatformPei-handle-non-power-of-two-spare-si.patch [bz#1443351]
  - ovmf-redhat-update-local-build-instructions-with-D-FD_SIZ.patch [bz#1443351]
  - ovmf-redhat-update-OVMF-build-commands-with-D-FD_SIZE_4MB.patch [bz#1443351]
  - Resolves: bz#1443351
    ([svvp][ovmf] job "Secure Boot Logo Test" failed  with q35&ovmf)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-1.git92d07e48907f.el7
changelog:
  - Rebase to 92d07e48907f [bz#1469787]
  - Resolves: bz#1469787
    ((ovmf-rebase-rhel-7.5) Rebase OVMF for RHEL-7.5)
  - Resolves: bz#1434740
    (OvmfPkg/PciHotPlugInitDxe: don't reserve IO space when IO support is disabled)
  - Resolves: bz#1434747
    ([Q35] code12 error when hotplug x710 device in win2016)
  - Resolves: bz#1447027
    (Guest cannot boot with 240 or above vcpus when using ovmf)
  - Resolves: bz#1458192
    ([Q35] recognize "usb-storage" devices in XHCI ports)
  - Resolves: bz#1468526
    (>1TB RAM support)
  - Resolves: bz#1488247
    (provide "OVMF_CODE.secboot.verbose.fd" for log capturing; silence "OVMF_CODE.secboot.fd")
  - Resolves: bz#1496170
    (Inconsistent MOR control variables exposed by OVMF, breaks Windows Device Guard)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-2.git92d07e48907f.el7
changelog:
  - ovmf-MdeModulePkg-Bds-Remove-assertion-in-BmCharToUint.patch [bz#1513632]
  - ovmf-MdeModulePkg-Bds-Check-variable-name-even-if-OptionN.patch [bz#1513632]
  - ovmf-MdeModulePkg-PciBus-Fix-bug-that-PCI-BUS-claims-too-.patch [bz#1514105]
  - ovmf-OvmfPkg-make-it-a-proper-BASE-library.patch [bz#1488247]
  - ovmf-OvmfPkg-create-a-separate-PlatformDebugLibIoPort-ins.patch [bz#1488247]
  - ovmf-OvmfPkg-save-on-I-O-port-accesses-when-the-debug-por.patch [bz#1488247]
  - ovmf-OvmfPkg-enable-DEBUG_VERBOSE-RHEL-only.patch [bz#1488247]
  - ovmf-OvmfPkg-silence-EFI_D_VERBOSE-0x00400000-in-QemuVide.patch [bz#1488247]
  - ovmf-OvmfPkg-silence-EFI_D_VERBOSE-0x00400000-in-NvmExpre.patch [bz#1488247]
  - ovmf-Revert-redhat-introduce-separate-silent-and-verbose-.patch [bz#1488247]
  - Resolves: bz#1488247
    (make debug logging no-op unless a debug console is active)
  - Resolves: bz#1513632
    ([RHEL-ALT 7.5] AAVMF fails to boot after setting BootNext)
  - Resolves: bz#1514105
    (backport edk2 commit 6e3287442774 so that PciBusDxe not over-claim resources)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-3.git92d07e48907f.el7
changelog:
  - ovmf-UefiCpuPkg-CpuDxe-Fix-multiple-entries-of-RT_CODE-in.patch [bz#1518308]
  - ovmf-MdeModulePkg-DxeCore-Filter-out-all-paging-capabilit.patch [bz#1518308]
  - ovmf-MdeModulePkg-Core-Merge-memory-map-after-filtering-p.patch [bz#1518308]
  - Resolves: bz#1518308
    (UEFI memory map regression (runtime code entry splitting) introduced by c1cab54ce57c)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20171011-4.git92d07e48907f.el7
changelog:
  - ovmf-MdeModulePkg-Core-Dxe-log-informative-memprotect-msg.patch [bz#1520485]
  - ovmf-MdeModulePkg-BdsDxe-fall-back-to-a-Boot-Manager-Menu.patch [bz#1515418]
  - Resolves: bz#1515418
    (RFE: Provide diagnostics for failed boot)
  - Resolves: bz#1520485
    (AAVMF: two new messages with silent build)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20180508-2.gitee3198e672e2
changelog:
  - OvmfPkg/PlatformBootManagerLib: connect consoles unconditionally [bz#1577546]
  - build OVMF varstore template with SB enabled / certs enrolled [bz#1561128]
  - connect Virtio RNG devices again [bz#1579518]
  - Resolves: bz#1577546
    (no input consoles connected under certain circumstances)
  - Resolves: bz#1561128
    (OVMF Secure boot enablement (enrollment of default keys))
  - Resolves: bz#1579518
    (EFI_RNG_PROTOCOL no longer produced for virtio-rng)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20180508-3.gitee3198e672e2.el7
changelog:
  - ovmf-redhat-provide-virtual-bundled-OpenSSL-in-OVMF.patch [bz#1607792]
  - Resolves: bz#1607792
    (add 'Provides: bundled(openssl) = 1.1.0h' to the spec file)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20180508-3.gitee3198e672e2.el7_6.1
changelog:
  - ovmf-MdeModulePkg-PartitionDxe-Ensure-blocksize-holds-MBR.patch [bz#1684006]
  - ovmf-MdeModulePkg-RamDiskDxe-Restrict-on-RAM-disk-size-CV.patch [bz#1684006]
  - Resolves: bz#1684006
    (CVE-2018-12180 OVMF: edk2: Buffer Overflow in BlockIo service for RAM disk [rhel-7.6.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20180508-4.gitee3198e672e2.el7
changelog:
  - ovmf-redhat-provide-firmware-descriptor-meta-files.patch [bz#1608599]
  - Resolves: bz#1608599
    ([RHEL 7.7] RFE: provide firmware descriptor meta-files for OVMF)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20180508-5.gitee3198e672e2.el7
changelog:
  - ovmf-MdeModulePkg-Variable-Fix-Timestamp-zeroing-issue-on.patch [bz#1666586]
  - ovmf-MdePkg-Add-more-checker-in-UefiDecompressLib-to-acce.patch [bz#1666586]
  - ovmf-IntelFrameworkModulePkg-Add-more-checker-in-UefiTian.patch [bz#1666586]
  - ovmf-BaseTools-Add-more-checker-in-Decompress-algorithm-t.patch [bz#1666586]
  - ovmf-BaseTools-Fix-UEFI-and-Tiano-Decompression-logic-iss.patch [bz#1666586]
  - ovmf-MdePkg-BaseUefiDecompressLib-Fix-UEFI-Decompression-.patch [bz#1666586]
  - ovmf-IntelFrameworkModulePkg-Fix-UEFI-and-Tiano-Decompres.patch [bz#1666586]
  - ovmf-MdeModulePkg-PartitionDxe-Ensure-blocksize-holds-MBR.patch [bz#1684007]
  - ovmf-MdeModulePkg-RamDiskDxe-Restrict-on-RAM-disk-size-CV.patch [bz#1684007]
  - ovmf-redhat-openssl-update-introduce-MOCK-shorthand-for-m.patch [bz#1650390]
  - ovmf-redhat-openssl-update-enable-the-bootstrap-container.patch [bz#1650390]
  - ovmf-redhat-consume-OpenSSL-1.1.0i-from-Fedora-28.patch [bz#1650390]
  - ovmf-Upgrade-OpenSSL-to-1.1.0j.patch [bz#1650390]
  - Resolves: bz#1650390
    (CVE-2018-5407 OVMF: openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) [rhel-7])
  - Resolves: bz#1666586
    (CVE-2017-5731 CVE-2017-5732 CVE-2017-5733 CVE-2017-5734 CVE-2017-5735 CVE-2018-3613 OVMF: various flaws [rhel-7])
  - Resolves: bz#1684007
    (CVE-2018-12180 OVMF: edk2: Buffer Overflow in BlockIo service for RAM disk [rhel-7.7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20180508-6.gitee3198e672e2.el7
changelog:
  - ovmf-MdeModulePkg-HiiDatabase-Fix-potential-integer-overf.patch [bz#1691479]
  - ovmf-MdeModulePkg-HiiImage-Fix-stack-overflow-when-corrup.patch [bz#1691479]
  - ovmf-MdeModulePkg-PartitionDxe-Add-check-for-underlying-d.patch [bz#1691647]
  - ovmf-MdeModulePkg-UdfDxe-Refine-boundary-checks-for-file-.patch [bz#1691647]
  - ovmf-MdeModulePkg-UdfDxe-Add-boundary-check-the-read-of-F.patch [bz#1691647]
  - ovmf-MdeModulePkg-UdfDxe-Add-boundary-check-for-Component.patch [bz#1691647]
  - ovmf-MdeModulePkg-UdfDxe-Add-boundary-check-for-getting-v.patch [bz#1691647]
  - ovmf-MdeModulePkg-UsbBusDxe-Fix-wrong-buffer-length-used-.patch [bz#1697534]
  - Resolves: bz#1691479
    (CVE-2018-12181 OVMF: edk2: Stack buffer overflow with corrupted BMP [rhel-7])
  - Resolves: bz#1691647
    (CVE-2019-0160 OVMF: edk2: buffer overflows in PartitionDxe and UdfDxe with long file names and invalid UDF media [rhel-7])
  - Resolves: bz#1697534
    (CVE-2019-0161 ovmf: edk2: stack overflow in XHCI causing denial of service [rhel-7])


author: Nicolas Chauvet <kwizart@gmail.com> - 1.7.1-1
changelog:
  - Update to 1.7.1

  -* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.7.0-5
  -- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild


author: Jan Safranek <jsafrane@redhat.com> - 2.0.19-2
changelog:
  - Updated RPM scriptlets with latest systemd-rpm macros (#850246)
  - Fixed fedora-review tool complaints


author: Ledvinka Ales <aledvink@redhat.com> - 2.0.19-5
changelog:
  - Support aarch64 by replicating release toolchain.
  - Configuration subpackage with kernel probed wildcard module aliases.
    as workaround for bz#961878 and fesco#1110
  - Man pages symlinks same as bin symlinks.
  - ipmi_ui command help argument.
  - ipmilan missing options.
  - Fixed build requirements.


author: Ledvinka Ales <aledvink@redhat.com> - 2.0.19-7
changelog:
  - Hint compilation to avoid strict aliasing and prevent type-punned pointer issues.
  - Fix rPath regression for OpenIPMI-perl library.


author: Boris Ranto <branto@redhat.com> - 2.0.19-12
changelog:
  - New release
  - Move OpenIPMI modprobe conf to /usr/lib/modprobe.d/ (#1195289)
  - Avoid warning on update/removal (#1256798)
  - Stop manually creating and shipping /var/run/OpenIPMI (#1296560)


author: Tom Lane <tgl@redhat.com> 3.8.1-2
changelog:
  - Fix License tag and permissions on example scripts under tutorial/,
    per discussion in package review request.
  Related: #452321


author: Tom Lane <tgl@redhat.com> 4.0-1
changelog:
  - Update to PyGreSQL 4.0
  - Relabel license as PostgreSQL now that that's separately recognized by OSI.


author: Nikolay Vladimirov <nikolay@vladimiroff.com> - 3.0.0-1
changelog:
  - Updated to 3.0 stable
  - Changed requires from python-numeric to numpy for BZ #504681
  - upstream removed full license text in license.txt
  - other minor spec fixes


author: Nikolay Vladimirov <nikolay@vladimiroff.com> - 3.0.1-1
changelog:
  - New upstream release
  - Fix BZ # 635496 - PyOpenGL crashes on every program
  - Update the shebang patch to work on the latest version
  - Upstream restored license.txt to their distribution


author: Petr Pisar <ppisar@redhat.com> - 1.2.15-14
changelog:
  - Do not harness backing store by default. Export SDL_VIDEO_X11_BACKINGSTORE
    environment variable to enable it.
  - Resolves: rhbz#1245417


author: Wim Taymans <wtaymans@redhat.com> - 1.2.15-17
changelog:
  - Fix Some CVEs: CVE-2019-7572, CVE-2019-7573, CVE-2019-7574,
    CVE-2019-7575, CVE-2019-7576, CVE-2019-7577, CVE-2019-7578,
    CVE-2019-7635, CVE-2019-7636, CVE-2019-7637, CVE-2019-7638
  - Resolves: rhbz#1716201, rhbz#1716202, rhbz#1716206,
  - Resolves: rhbz#1716207, rhbz#1716208


author: Pierre-Yves Chibon <pingou@pingoured.fr> - 0.11.6-12
changelog:
  - Add m2crypto as R
  - Change License
  - Update spec
  -   All these changes comes from Toshio's patch BZRH #602932


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.14-1.el7
changelog:
  - Rebase to 2.2.14 [bz#1451172]
  - wla-Remove-FIPS-setting-from-the-default-config.patch [bz#1467553]
  - Resolves: bz#1451172
    ([WALA] Request to package WALA 2.2.14 into RHEL 7 Repo)
  - Resolves: bz#1467553
    ([WALA] Remove FIPS from default config in WALA-2.2.14)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.18-1.el7
changelog:
  - Rebase to 2.2.18 [bz#1491873]
  - Resolves: bz#1491873
    ([WALA]Request to package WALA 2.2.18 into RHEL 7 Repo)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.18-2.el7
changelog:
  - wa-Add-show-configuration-option.patch [bz#1508340]
  - Resolves: bz#1508340
    ([WALA] WALA usage prompt lack of " waagent -show-configuration")


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.38-1.el7
changelog:
  - Rebase to 2.2.38 [bz#1721727]
  - Resolves: bz#1721727
    ([Azure]walinuxagent 2.2.38 packaging request)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.38-2.el7
changelog:
  - wla-Add-support-for-Gen2-VM-resource-disks-1654.patch [bz#1714167]
  - Resolves: bz#1714167
    ([Azure][WALA] Cannot find temporary disk device in Gen2 VM)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.46-1
changelog:
  - Rebase to 2.2.26 [bz#1794682]
  - Resolves: bz#1794682
    ([Azure][RHEL-7]Rebase WALinuxAgent to 2.2.46)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.46-2
changelog:
  - wla-Update-Provisioning-options-1853.patch [bz#1822883]
  - Resolves: bz#1822883
    ([Azure][RHEL-7]Some parameter changes are not in waagent.conf)


author: Alan Bartlett <ajb@elrepo.org> - 1.1.7-3
changelog:
  - Updated to the 28700 variant of the 1.1.7 source tarball.
  - Set release to 3 so as to be in sync with the EL5 version.


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-46
changelog:
  - remove not implemented option AttemptHardlink in vmcore.conf
  - introduce unsafe reporting for not-reporable problems
  - rewrite skip_pfx() function to work with journal msgs
  - don't expect kernel's version '2.6.*' or '3.*.*'
  - Related: #1416586, #1257159, #1328264, #1378469


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-49
changelog:
  - Translation updates
  - Stop creating uReports for unpackaged executables
  - koops: add detailed taint flag description for kernel oopses
  - koops: fix kernel oops and fatal MCE recognition
  - python: provide more information about Python exceptions
  - vmcore: fix replication of vmcore files
  - Related: #1271213, #1460224, #1374648, #1361116, #1228344,
  - Related: #1395285, #1214730, #1446410, #1319828, #1501718


author: Matej Marusak <mmarusak@redhat.com> - 2.1.11-51
changelog:
  - a-a-s-p-data: fix segfault if GPGKeysDir isn't configured
  - spec: turn on --enable-native-unwinder aarch64
  - plugins: a-a-g-machine-id use dmidecode command
  - spec: use dmidecode instead of python-dmidecode
  - Related: #1566707, #1566707, #1260074, #1591141


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-53
changelog:
  - cli: load config file at the beginning
  - ccpp: fast dumping and abrt core limit
  - conf: increase MaxCrashReportsSize to 5GiB
  - vmcore: /var/tmp/abrt is no longer a dump location
  - koops: Filter kernel oopses based on logged hostname
  - daemon: Fix double closed fd race condition
  - Related: #1618818, #1647841, #1613236, #1613182, #1655241


author: Jakub Filak <jfilak@redhat.com> - 1.0.6-3
changelog:
  - Mark stack trace with remote paths as not-reportable
  - Do not provide own reporting workflows
  - Code optimization
  - Do not report exception caught by native functions
  - Use the last frame class path for executable
  - Gracefully handle JVMTI errors
  - Add an abstract to README
  - Add support for journald and syslog
  - Make log output disabled by default
  - Add support for changing log directory
  - Fix a race condition causing a crash of JVM
  - Related: #1051198
  - Resolves: #1051483, #1054720, #1054737, #1055581


author: Jakub Filak <jfilak@redhat.com> - 1.0.6-6
changelog:
  - Make sure that agent_onload and agent_onunload are processed only once
  - Add test results for Linux-aarch64
  - Resolves: #1044756, #1063322


author: Jakub Filak <jfilak@redhat.com> - 1.0.6-1
changelog:
  - Fix a deadlock in GC start callback
  - Disable experimental features in production releases
  - Resolves: #1012827


author: Dasha Kavchuk <dkavchuk@cloudlinux.com> 1.0-1
changelog:
  - AWP-2: AccelerateWP related utilities separated from LVE utilities and moved into its own spec file


author:
  alutsiuk <alutsiuk@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Dasha Kavchuk <dkavchuk@cloudlinux.com> 1.0-5

changelog:
  - AWP-17: Extend cl-summary with new AccelerateWP metrics
  - XRAY-513: Send website incompatibilities to x-ray microservice
  - AWP-18: Split accelerate-wp to separate git project
  - XRAY-525: Update project's Sentry configuration
  - LU-3257: Rebrand WPOS into AccelerateWP


author: Dasha Kavchuk <dkavchuk@cloudlinux.com> 1.0-6
changelog:
  - AWP-49: Do not fail in case of errors for individual users during bulk operations with modules
  - AWP-44: Added proper handling for malformed output from wp-cli utility
  - AWP-57: Added checker for cagefsctl presence


author: alutsiuk <alutsiuk@cloudlinux.com> 1.0-7
changelog:
  - AWP-64: Modify wp-cli install, activation and deactivation command
  - AWP-73: Handle malformed wp-cli response which leads to incorrect misconfiguration properly


author: Dasha Kavchuk <dkavchuk@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> 1.0-8
changelog:
  - AWP-91: Syncronize only enabled modules during allow procedure
  - XRAY-556: Object cache advice is not displayed until redis package installed
  - AWP-101: Implement ability to allow modules for new users


author: alutsiuk <alutsiuk@cloudlinux.com> 1.0-9
changelog:
  - AWP-110: Clean up redis constants after plugin disabling
  - AWP-107: Fix redis processes not starting after server reboot
  - AWP-89: Don't reload redis when user has disabled module


author: Dasha Kavchuk <dkavchuk@cloudlinux.com> 1.0-10
changelog:
  - AWP-122: Skip broken document roots while scanning for WordPress sites
  - AWP-105: Cleanup garbage files left after user's removal
  - AWP-123: Improve incompatibility message and logic once conflicting plugin found


author: alutsiuk <alutsiuk@cloudlinux.com>, Dasha Kavchuk <dkavchuk@cloudlinux.com> 1.1-1
changelog:
  - AWP-102: Explicitly drop PHP `disable_functions` directive during wp-cli execution; improve disable feature procedure
  - AWP-176: Generate first scanning report during allow-for-all
  - AWP-153: Change accelerate wp messages according to new names
  - AWP-155: Implement migration for AccelerateWP clients
  - AWP-152: Replace "module" with "feature" in cloudlinux-awp-user commands
  - AWP-151: Extend cloudlinux-awp-admin get-report with new statistics
  - AWP-150: cloudlinux-awp-admin adaption to manipulate feature suites
  - AWP-173: Modift purge-cache CLI according to renamings


author: alutsiuk <alutsiuk@cloudlinux.com>, Dasha Kavchuk <dkavchuk@cloudlinux.com> 1.1-2
changelog:
  - AWP-208: Add support of CLAdmin license
  - XRAY-680: Successfully disable optimization feature even if plugin was manually removed
  - AWP-216: activate icon at every allow command in case if it appears hidden in UI


author: Roman Krompets <rkrompets@cloudlinux.com>, Ruslan Koliada <rkoliada@cloudlinux.com> - 1.9-32
changelog:
  - Prevent UnicodeDecodeError when parsing wp-cli output (CLPRO-1288)
  - Fix php version could not be obtained due to extra slash in docroot (CLPRO-1884)


author: Ruslan Koliada <rkoliada@cloudlinux.com> - 1.9-33
changelog:
  - Remove SmartAdvice plugin after disabling AWP in WHM (CLPRO-775)
  - Fix the cloudlinux-awp-user get unility for case when features are hidden (CLPRO-2694)


author: Roman Krompets <rkrompets@cloudlinux.com>, Ruslan Koliada <rkoliada@cloudlinux.com> - 1.9-34
changelog:
  - Analyze and fix issues reported by sentry event "Documentroot s is missing in user information" (CLPRO-2018)
  - Implemented hooks on WP sites cloning for sync AccelerateWP modules with original website (CLPRO-2678)
  - Fixed conflict between redis and alt-redis (CLPRO-2751)
  - Fix failure when website in the Multisite mode with the plugin status "active-network" (CLPRO-2750)
  - Update wp cli to version 2.12.0 (CLPRO-1281)


author: Ruslan Koliada <rkoliada@cloudlinux.com> - 1.9-36
changelog:
  - Refactored Critical CSS module for WP2 to improve availability (CLPRO-2782)
  - Add display_error=1 in wp-cli-wrapped to simplify troubleshooting (CLPRO-2630)


author: Ruslan Koliada <rkoliada@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 1.10-1
changelog:
  - Improve installation of redis and other PHP extension needed for AccelerateWP (CLPRO-2127)
  - Added MAx Cache cli commands (MAXWS-926)


author: Timur Kalimullin <tkalimullin@cloudlinux.com>, Roman Krompets <rkrompets@cloudlinux.com> - 1.10-2
changelog:
  - AWP set-suite take too long due to daemon-reload (CLPRO-2925)
  - Avoid saving unnecessary WordPress backup files when activating Redis Object Cache (Synced from 1.9-39)


author: Ruslan Koliada <rkoliada@cloudlinux.com> - 1.10-5
changelog:
  - CLPRO-3045: Improved Redis configuration generation, daemon communication, and upgrade task handling


author:
  Ruslan Koliada <rkoliada@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> - 1.10-8

changelog:
  - CLPRO-3177: Reliability and robustness improvements in AccelerateWP utilities and helper scripts
  - CLOS-4494: Fix enable_redis_for_alt_php.py crash when an alt-php directory has no PHP binary


author: Ruslan Koliada <rkoliada@cloudlinux.com> - 1.10-9
changelog:
  - CLPRO-3147: Fault-tolerance and edge-case handling fixes in AccelerateWP
  - CLPRO-3204: Stability and code-quality enhancements across the AccelerateWP daemon, CLI, and supporting scripts
  - CLPRO-3237: Robustness and reliability improvements across the AccelerateWP daemon, CLI, and helper scripts


author:
  Dasha Kavchuk <dkavchuk@cloudlinux.com>, Sergey Kokhan <skokhan@cloudlinux.com>, Mariia Mozgunova <mmozgunova@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> 1.2-1

changelog:
  - AWP-285: Enable Plesk support and adapt to CageFS support on Solo edition
  - AWP-245: Fix AWP post checker for sites with disabled HTTP access
  - AWP-246: Add "User-Agent" header for post checker requests
  - AWP-270: Added CL9 support
  - AWP-225: AccelerateWP daemon adapted to using CPAPI
  - AWP-226: AccelerateWP information collector adapted to using CPAPI
  - AWP-230: Refactor code to split large modules
  - AWP-231: Refactor imports
  - AWP-229: Added Plesk PHP classes
  - AWP-233: Ensure Plesk PHP Redis modules installation and configuration
  - AWP-279: Fix skips for CloudLinux Admin
  - AWP-264: Add support lsapi handler and alt-phpXY on CloudLinux Solo
  - AWP-273: Add support of Vendor Plesk PHP
  - AWP-232: Implement AccelerateWP hooks for Plesk


author: Mariia Mozgunova <mmozgunova@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> 1.2-2
changelog:
  - AWP-301: Implement CLI to auto-install of AccelerateWP on sites without page cache
  - AWP-276: Improve wordpress site detection


author:
  Mariia Mozgunova <mmozgunova@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, oshyshatskyi <oshyshatskyi@cloudlinux.com>, Dasha Kavchuk <dkavchuk@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> 1.3-2

changelog:
  - AWP-339: Remove AccelerateWP plugin from wp-admin when AccelerateWP is turned off in WHM.
  - AWP-295: Read maxclients redis parameter from config on reload
  - AWP-221: Implement CDN optimization feature managing
  - XRAY-696: Added wrapper for wp-cli
  - AWP-304: Update AWP statistics to new statuses
  - AWP-315: Extend Plesk API to call cloudlinux-awp-admin command
  - AWP-331: Do not allow billing to change status when feature is disabled
  - AWP-287: Added ability to change default without affecting current users
  - AWP-268: Create cron task for CLN integration with AWP
  - AWP-318: Return modules instead of features in get-report
  - AWP-333: Disambiguate output of CLI utility for activation of AWP for all WP sites.
  - AWP-341: Improve detecting username inside monitoring daemon
  - AWP-346: Optimize execution of set-suite command
  - AWP-354: Added the ability to insert default, visible statuses to Plesk module
  - AWP-365: Extend SmartAdvice to interact with suites
  - AWP-346: Use double fork and close std output to avoid WHMCS timeouts
  - AWP-349: Improve AccelerateWP premium feature enabling
  - AWP-355: Add aditional arguments to upgrade-url for WHMCS
  - AWP-384: Disable fuzzy parsing of arguments


author:
  oshyshatskyi <oshyshatskyi@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, Dasha Kavchuk <dkavchuk@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> 1.3-3

changelog:
  - XRAY-755: Ignore missing system users in smart advice
  - AWP-403: AccelerateWP commands optimization: reduce amount of php_get_vhost_versions calls
  - XRAY-763: Improve rotation of AccelerateWP logs
  - AWP-412: Improve incompatibility detection with AccelerateWP plugin


author: oshyshatskyi <oshyshatskyi@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> 1.3-4
changelog:
  - AWP-504: Make sure that unique_id of an user is not editable
  - AWP-314: Send report to CLN in cln-sync command


author:
  oshyshatskyi <oshyshatskyi@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, Dasha Kavchuk <dkavchuk@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> 1.3-3

changelog:
  - XRAY-755: Ignore missing system users in smart advice
  - AWP-403: AccelerateWP commands optimization: reduce amount of php_get_vhost_versions calls
  - XRAY-763: Improve rotation of AccelerateWP logs
  - AWP-412: Improve incompatibility detection with AccelerateWP plugin
  - AWP-404: AccelerateWP commands optimization: Reduce extra calls while getting wordpress incompatibilities


author:
  alutsiuk <alutsiuk@cloudlinux.com>, oshyshatskyi <oshyshatskyi@cloudlinux.com>, Dasha Kavchuk <dkavchuk@cloudlinux.com> 1.4-1

changelog:
  - AWP-483: AccelerateWP Premium Image Optimization feature added
  - AWP-377: AccelerateWP Premium Critical CSS feature added
  - AWP-397: Add AccelerateWP CDN Pro suite
  - AWP-413: Separate upgrade urls for AccelerateWP Premium and AccelerateWP CDN Pro
  - CLPRO-197: Add AcceleratWP CDN Pro suite metric
  - AWP-272: Ignore unknown suites while reading configs
  - AWP-444: Add AccelerateWP CDN suites to get-report utility
  - AWP-452: Do not try to generate upgrade_url for features without it
  - AWP-467: Fix error which leads to premium become available while only free allowing
  - XRAY-770: Added get_user_auth_key papi call
  - AWP-464: Add required parameter api_key when enabling CDN
  - AWP-415: Add terms agreement to CLI tools
  - AWP-513: Extend subscription listener to handle multiple features
  - AWP-510: Extend subscription --listen command with CDN support
  - CLPRO-341: Set WP_REDIS_GRACEFUL constant to handle redis connection issues
  - AWP-505: Place "Terms and conditions" CDN
  - AWP-519: Automatically sync data to CLN when admin allows premium feature for users
  - CLPRO-328: Information about supported suites added to options getter command
  - CLPRO-336: Implement additional CDN plans in AWP
  - XRAY-673: Add CDN feature post-check
  - CLPRO-319: Add subscription purchase date to billing report
  - CLPRO-324: Add subscription warning to user utility
  - CLPRO-329: Set MINIMUM_AWP_PLUGIN_VERSION for Critical CSS feature
  - CLPRO-343: Set MINIMUM_AWP_PLUGIN_VERSION for Image Optimization feature
  - CLPRO-349: Require cloudlinux-awp-plugin
  - CLPRO-346: Suppress deprecation warnings from PHP in wp-cli wrapper


author: alutsiuk <alutsiuk@cloudlinux.com>, oshyshatskyi <oshyshatskyi@cloudlinux.com> 1.4-2
changelog:
  - CLPRO-347: Switch features report to new CLN format
  - AWP-620: Send feature activation status to CLN
  - AWP-624: Follow CLN restriction of non-nullable purchase date
  - AWP-630: Add clickhouse statistics about users with active premium and CDN


author:
  alutsiuk <alutsiuk@cloudlinux.com>, oshyshatskyi <oshyshatskyi@cloudlinux.com>, Martin Krcho <mkrcho@cloudlinux.com> 1.5-1

changelog:
  - CLPRO-324: Add subscription warning to user utility, part II
  - AWP-584: Fix traffic_limit attribute updating
  - AWP-588: Add upgrade_url to json of Image Optimization and Critical CSS advices
  - AWP-632: Bump AccelerateWP plugin minimum supported version for Critical CSS and Image Optimization features
  - CLPRO-348: Speed-up plans synchronization between user and microservice
  - AWP-619: Prohibit allowing AccelerateWP CDN Free and Pro for reseller users
  - AWP-635: Fix webiste post-check failed feature enabling
  - AWP-574: Add support of new versions of redis plugin
  - AWP-607: Replace acceleratewp in upgrade url with cloudlinux_advantage
  - AWP-415: Move cdn agreement to cagefs-mounted directory
  - AWP-641: Improve WP CLI wrapper script to handle help commands


author: alutsiuk <alutsiuk@cloudlinux.com>, oshyshatskyi <oshyshatskyi@cloudlinux.com> 1.6-1
changelog:
  - AWP-10: Add LiteSpeed webserver support
  - XRAY-801: Handle CDN post-check issues in AccelerateWP
  - AWP-638: Speed up loading of AccelerateWP in users's part


author:
  Timur Kalimullin <tkalimullin@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, oshyshatskyi <oshyshatskyi@cloudlinux.com> 1.6-2

changelog:
  - AWP-636: Implement ability for server admins to disable and enable Object Cache Pro banners
  - AWP-701: Speed up loading AccelerateWP: cache php inforamtion in get utility
  - AWP-724: Fix handler not supported on LiteSpeed webserver
  - AWP-703: Speed up loading AccelerateWP: cache wp-cli commands which read website configuration


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 1.6-3
changelog:
  - AWP-703: Cache wp-cli commands which read website configuration
  - AWP-708: Add a new metric to summary
  - CLPRO-432: Add possibility to track AccelerateWP upgrade URL
  - AWP-714: Ignore disallowed users when counting active plugins


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 1.6-4
changelog:
  - CLPRO-561: Fix the AccelerateWP CLN report generation in case of more than one feature included in suite


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> 1.6-5
changelog:
  - AWP-752: Update /usr/bin/cloudlinux-awp-user in cagefs when updating accelerate-wp
  - CLPRO-408: Implement ability to hide specific feature


author:
  oshyshatskyi <oshyshatskyi@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, Roman Krompets <rkrompets@cloudlinux.com> 1.7-1

changelog:
  - CLPRO-1071: Fix common bugs reported by Sentry
  - CLPRO-1071: Raised minimum supported PHP version for Object Caching to 7.2
  - CLPRO-779: Create custom acceleratewp ini with needed extensions
  - CLPRO-436: Renamed variables to ensure better consistency and clarity
  - AWP-765: Fix CLN billing report failed on user disk quota


author: oshyshatskyi <oshyshatskyi@cloudlinux.com> 1.7-2
changelog:
  - Automatically enable php extensions (json, igbinary, redis) when object cache becomes visible (CLPRO-1136)


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> - 1.8-1
changelog:
  - Migrate codebase to Python3.11 (CLPRO-1124)
  - Fix getting upgrade url for AccelerateWP Premium and AccelerateWP CDN (CLPRO-1182)


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> - 1.8-2
changelog:
  - Add Solo/Admin editions support (CLPRO-1081)
  - Fix getting custom ini path in enable_redis_for_alt_php script (CLPRO-1235)
  - Fix issues reported by Sentry (CLPRO-1237)
  - Don't scan user websites when AWP is turned off (CLPRO-1227)


author: Timur Kalimullin <tkalimullin@cloudlinux.com> - 1.8-3
changelog:
  - Implement email cancellation in cloudlinux-awp-admin (CLPRO-1191)
  - Improving processing of json wp-cli command output when there is excess output (CLPRO-796)


author: alutsiuk <alutsiuk@cloudlinux.com> - 1.8-4
changelog:
  - Fix sending sentry events on empty scanning report status (CLPRO-1334)
  - Fix AccelerateWP activation fails on users with disk quota exceeded (CLPRO-781)
  - Setup xray-user-agent if AccelerateWP is enabled (CLPRO-730)


author: alutsiuk <alutsiuk@cloudlinux.com> - 1.9-1
changelog:
  - Implement DirectAdmin support to AccelerateWP (CLPRO-1395, CLPRO-1403)
  - Add --skip-dns-check options to ignore site resolving results (CLPRO-1422)
  - Speed up enabling AccelerateWP feature (CLPRO-1423)


author: alutsiuk <alutsiuk@cloudlinux.com> - 1.9-1
changelog:
  - Implement DirectAdmin support to AccelerateWP (CLPRO-1395, CLPRO-1403)
  - Add --skip-dns-check options to ignore site resolving results (CLPRO-1422)
  - Speed up enabling AccelerateWP feature (CLPRO-1423)
  - Add AccelerateWP feature-flags into new metrics discovery system (CLPRO-1282)


author: alutsiuk <alutsiuk@cloudlinux.com> - 1.9-2
changelog:
  - Fix wp-cli commands fail on installed 3rd WordPress plugins (CLPRO-1379)
  - Fix getting php version via clwpos_monitoring daemon (CLPRO-1490)
  - Fix broken utilities output due to syslog configuration (CLPRO-1491)


author: Martin Krcho <mkrcho@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 1.9-3
changelog:
  - Improve selection of required PHP extensions in WP CLI wrapper script (CLPRO-1431)
  - Disable open_basedir restrictions for WP-CLI wrapper script (CLPRO-1525)
  - Improved handling of broken sites in WP CLI wrapper script (CLPRO-1468, CLPRO-1478)


author: alutsiuk <alutsiuk@cloudlinux.com>, Dmitriy Leonov <dmleonov@cloudlinux.com> - 1.9-4
changelog:
  - Add new types of incompatibilities on website scanning (CLPRO-1544)
  - Improve error reporting in WP CLI wrapper (CLPRO-1558)


author: Daniil Danilkin <ddanilkin@cloudlinux.com>, Dmitriy Leonov <dmleonov@cloudlinux.com> - 1.9-5
changelog:
  - Fix clwpos CLI errors if WordPress version.php is missing (CLPRO-1430)
  - Improve error reporting in WP CLI wrapper (CLPRO-1594)


author: alutsiuk <alutsiuk@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 1.9-6
changelog:
  - Add user syncing on --allowed-for-all option (CLPRO-1608)
  - Replace edition specific check with universal cpapi feature supported (CLPRO-1531)
  - Activating AccelerateWP via Plesk extension for users with multiple subscriptions (CLPRO-1643)
  - Manage configs same way across all CloudLinux Editions (CLPRO-1658)
  - Fix disk quota exceeded issue on creating user .clwpos directory (CLPRO-1666)


author:
  Timur Kalimullin <tkalimullin@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, Dmitriy Leonov <dmleonov@cloudlinux.com> - 1.9-7

changelog:
  - Activating AccelerateWP via Plesk extension for users with multiple subscriptions (CLPRO-1643, CLPRO-1668)
  - Activating AccelerateWP on requests from WHMCS (CLPRO-1694)
  - Unify suites defaults across all editions (CLPRO-1657)
  - Update website incompatibilities when AWP daemon is not running (CLPRO-1689)
  - Fix the way of returning the WP CLI wrapper value (CLPRO-1744)
  - Add ability to make suite visible per user (CLPRO-1746)
  - Backup AccelerateWP configs on activation via WHMCS (CLPRO-1768)
  - Send analytics on allow suite from WHMCS (CLPRO-1738)
  - Extend Plesk Extension with new methods (CLPRO-1733)
  - Add more logs to analyze "'int' object is not iterable" sentry issue (CLPRO-1739)
  - Fix get-stat not accounting default states of suites (CLPRO-1781)


author: Dmitriy Leonov <dmleonov@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 1.9-8
changelog:
  - CLN sync - log list of affected unique_ids when authentication fails (CLPRO-1709)
  - Automatic installation and update the extension for Plesk for interaction of the CloudLinux Advantage WHMCS addon with AccelerateWP commands (CLPRO-1731)
  - Fix backup AccelerateWP configs (CLPRO-1882)


author: alutsiuk <alutsiuk@cloudlinux.com>, Dmitriy Leonov <dmleonov@cloudlinux.com> - 1.9-9
changelog:
  - Automatically uninstall SmartAdvice plugins and turn off notifications if they were enabled automatically (CLPRO-1926)
  - Added option to disable SmartAdvice WordPress plugins (CLPRO-1924)
  - Added Smart Advice plugin installation metric to statistics (CLPRO-1928)
  - Make set-suite command process multiple users (CLPRO-1902)
  - Added restore AccelerateWP backup command (CLPRO-1852)
  - Turn off AccelerateWP suites during erase of AccelerateWP (CLPRO-1915)


author: alutsiuk <alutsiuk@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> - 1.9-10
changelog:
  - Fix tracebacks when control panel returns controversial information about user (CLPRO-1898, CLPRO-1843)
  - Fix alt-php redis configurator to consider msgpack extension (CLPRO-1958)
  - Fix clwpos_collect_information script to create needed directory (CLPRO-1897)


author:
  alutsiuk <alutsiuk@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 1.9-11

changelog:
  - Add support of translations in AccelerateWP (CLPRO-1858)
  - Add whmcs statistics endpoint in cloudlinux-awp-admin tool
  - The execution of commands for interaction with WHMCS has been accelerated. Restoring backups from WHMCS for server settings only. Added deprecated status for backup folders. (CLPRO-1905, CLPRO-1994)


author:
  alutsiuk <alutsiuk@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 1.9-11

changelog:
  - Add support of translations in AccelerateWP (CLPRO-1858)
  - Add whmcs statistics endpoint in cloudlinux-awp-admin tool (CLPRO-2005)
  - Improved backup recovery for WHMCS, added commands to Plesk extension (CLPRO-1905, CLPRO-1994)


author: Timur Kalimullin <tkalimullin@cloudlinux.com>, Vladimir Lebedev <vlebedev@cloudlinux.com> - 1.9-13
changelog:
  - Disable error logging when running wp-cli (CLPRO-1779)
  - Fix inability to turn off smart advice notification during yum transaction with no license (CLRPO-2026)


author: alutsiuk <alutsiuk@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 1.9-18
changelog:
  - Fix sending empty report with AccelerateWP features to CLN (CLPRO-2239)
  - Make AccelerateWP Premium Object Cache free (CLPRO-2279, CLPRO-2281)
  - Fix AccelrateWP port create user hook for reseller user (CLPRO-2091)
  - Fix folder with AccelrateWP backup folder not found (CLPRO-2266)


author: alutsiuk <alutsiuk@cloudlinux.com> - 1.9-20
changelog:
  - Remove legacy "source" key from configs (CLPRO-2268)
  - Fix restoring Object Cache feature upon AccelerateWP Premium suite activation (CLPRO-2041)


author: alutsiuk <alutsiuk@cloudlinux.com> - 1.9-21
changelog:
  - Fix redis is unreachable when enabling Object Cache feature (CLPRO-2243)
  - Fix removing AccelerateWP hooks upon package removal (CLPRO-2293)
  - Fix AccelerateWP end-user info loading when wp-cli is malformed for site (CLPRO-1845)


author: alutsiuk <alutsiuk@cloudlinux.com> - 1.9-22
changelog:
  - Add caching for getting supported suites by license (CLPRO-2339)
  - Fix redis processes are not started after reboot (CLPRO-1667)


author: Timur Kalimullin <tkalimullin@cloudlinux.com> - 1.9-23
changelog:
  - Improved wp-cli commands work with WordPress sites (CLPRO-2478)
  - Fix AccelerateWP suite activation slows down account creation (CLPRO-2446)


author: Yehor Komarov <ykomarov@cloudlinux.com> - 1.9-25
changelog:
  - Fix BytesWarning: str() on a bytes instance issue in collect_information script (CLPRO-2244)
  - Added support for Ubuntu 22 (CLPRO-2533)


author: alutsiuk <alutsiuk@cloudlinux.com>, Ruslan Koliada <rkoliada@cloudlinux.com> - 1.9-26
changelog:
  - Implement all features deactivation for all user websites (CLPRO-2562)
  - Fix getting user owner for ftp users on Plesk (CLPRO-2526)


author: alutsiuk <alutsiuk@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 1.9-27
changelog:
  - Fix clwpos_monitoring service does not re-create redis service automatically (CLPRO-2597)
  - Added CloudLinux MAx WebServer support for WordPress plugin (AP2NGX-222)


author: Roman Krompets <rkrompets@cloudlinux.com>, Ruslan Koliada <rkoliada@cloudlinux.com> - 1.9-28
changelog:
  - Implement automatical creation of missed /var/clwpos/uids/UID directories for all users (CLPRO-2491)
  - Fix cloudlinux-awp-user get/enable/disable does not work with ftp user on Plesk (CLPRO-2602)
  - Fix AWP check conflicting PHP module on FS instead PHP loaded modules (CLPRO-1952)


author: Roman Krompets <rkrompets@cloudlinux.com> - 1.9-30
changelog:
  - Unbind accelerate-wp from X-Ray (CLPRO-2201)
  - Fix redis to become inactive after clonning WP site with create a new domain (CLPRO-2670)


author: Ray Strode <rstrode@redhat.com> - 0.6.42-2
changelog:
  - Update to 0.6.44
    Related: #1424623
  - export password expiration policy from shadow
    Resolves: #1334464


author: Ray Strode <rstrode@redhat.com> - 0.6.45-1
changelog:
  - Update to 0.6.45 so password expiration policy is wrapped by libaccountsservice
    Related: #1424623 #1334464


author: Ray Strode <rstrode@redhat.com> - 0.6.45-2
changelog:
  - Don't tread explicitly requested users as cached
    Fixes UncacheUser operation.
    Resolves: 1446620
    Related: #1432602


author: Ray Strode <rstrode@redhat.com> - 0.6.45-6
changelog:
  - Don't return bogus password expiration policy when
    shadow file is unavailable
    Resolves: #1530659


author: Kamil Dudka <dkdudka@redhat.com> - 2.2.51-13
changelog:
  - avoid failure of %check when building as root (#1085389)
  - setfacl.1: document the meaning of '-' in perms (#1337039)


author: Al Stone <ahs3@redhat.com> - 20130517-1
changelog:
  - Update to latest upstream source.
  - Remove acpica-tools-config.patch -- now in upstream
  - Remove iasl-signed-char.patch -- now in upstream
  - Updated debian-big_endian.patch
  - Updated debian-unaligned.patch


author: Al Stone <ahs3@redhat.com> - 20130517-2
changelog:
  - Correct an oversight: we provide an acpidump in conflict with the
    version in pmtools (which appears to be dead upstream) but had not
    made it an alternative before


author: Al Stone <ahs3@redhat.com> - 20130626-1
changelog:
  - Update to latest upstream source.
  - Move acpidump to acpidump-acpica so it be an alternative properly
  - Add basic man page for acpidump
  - Enable use of AAPITS tests during the check step


author: Al Stone <ahs3@redhat.com> - 20130725-2
changelog:
  - Fix several rpmlint items (listed below)
  - Add versions to explicit provides for acpixtract, acpidump
  - Not all setup steps used -q
  - Setup executable test script (run-misc-tests.sh) differently
  - Removed unneeded commented out line with macros in it
  - Removed mixed use of spaces and tabs (all spaces now)
  - Corrected source URLs (upstream moved)


author: Al Stone <ahs3@redhat.com> - 20130823-2
changelog:
  - Add in a copy of the GPLv2 text in order to comply with the requirement
    to always redistribute the terms of the license.


author: Dean Nelson <dnelson@redhat.com> - 20130823-3
changelog:
  - Fix run-misc-tests.sh script to properly set the number of BITS to 64 when run
    on a s390x system.


author: Dean Nelson <dnelson@redhat.com> - 20130823-7
changelog:
  - Fix the dangling symlink issue for acpidump(1) and acpixtract(1) man pages
    that was reported in RHBZ 1074681.


author: Dean Nelson <dnelson@redhat.com> - 20130823-8
changelog:
  - Fix run-misc-tests.sh script to properly set the number of BITS to 64 when run
    on a ppc64le system as requested by RHBZ 1125471.


author: Dean Nelson <dnelson@redhat.com> - 20140926-1
changelog:
  - Update to the latest upstream version of acpica as requested by RHBZ 967963.
  - Refresh existing patches and add new ones to enable a clean build.
  - Fix build failures that start before and finish after midnight.


author: Dean Nelson <dnelson@redhat.com> - 20150619-1
changelog:
  - Update to the latest upstream version of acpica as requested by RHBZ 1211328.
  - Refresh existing patches and add/delete ones to enable a clean build.
  - Add missing return status checks after a few calls to AcpiDmDumpTable() and
    one to fopen().


author: Dean Nelson <dnelson@redhat.com> - 20150619-3
changelog:
  - Remove acpitests-unix-20150619 directory from the build because it was a
    mistake that it was present and it complicated the fixing of the file
    permissions done related to RHBZ 1211328's requested rebase.


author: Dean Nelson <dnelson@redhat.com> - 20150619-3
changelog:
  - Remove acpitests-unix-20160527 directory from the build because it was a
    mistake that it was present and it complicated the fixing of the file
    permissions done related to RHBZ 1211328's requested rebase.


author: Dean Nelson <dnelson@redhat.com> - 20160527-1
changelog:
  - Update to the latest upstream version of acpica as requested by RHBZ 1278038.
  - Refresh existing patches and add/delete ones to enable a clean build.


author: Dean Nelson <dnelson@redhat.com> - 20150619-3
changelog:
  - Remove acpitests-unix-%{version} directory from the build because it was a
    mistake that it was present and it complicated the fixing of the file
    permissions done related to RHBZ 1211328's requested rebase.


author: Al Stone <ahs3@redhat.com> - 20160527-2
changelog:
  - Corrected the use of percent signs in the change log and made sure
    they are all properly escaped.  Resolves: #1425899.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.18-1
changelog:
  - New version
  - Replaced RPM_BUILD_ROOT variables by {buildroot} macros
  - Updated URLs to project home page and source code
  - Dropped mk patch, handled better way in the spec


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.19-5
changelog:
  - Used unitdir macro instead of the hardcoded systemd paths
    Related: rhbz#1057268
  - Fixed bogus date in changelog (best effort)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.19-7
changelog:
  - Switched to dynamic connections (increased max connections from 20 to 1024)
    Resolves: rhbz#1351999
  - Simplified conversion script and moved it to posttrans to get rid of warnings
    during upgrade from RHEL-6 to RHEL-7
    Resolves: rhbz#1086686


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.19-9
changelog:
  - Switched kacpimon to dynamic connections (increased max connections
    from 20 to 1024)
    Resolves: rhbz#1450980


author: Sumit Bose <sbose@redhat.com> - 0.8.1-3
changelog:
  - fix crash when name is specified on the command line and detect names with
    lower case characters [#1359773]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-4
changelog:
  - adcli doesn't update kvno while joining system to AD domain (RODC) [#1471021]
  - adcli_tool_computer_delete description spelling [#1450179]
  - adcli man page should not only mention FILE type credential caches [#1423871]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-5
changelog:
  - enable "Trust this computer for delegation to any service (Kerberos only)" [#1538730]
  - realm join fails with Insufficient permissions [#1542354]
  - adcli update option cannot add principals for computer object [#1545568]
  - adcli refuses to add service principals [#1547013]
  - [RFE] Support adding SPN of a different host [#1547014]
  - adcli segfaults during AD join RHEL 7.5 [#1575554]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-6
changelog:
  - Couldn't set service principals on computer account [#1608212]
  - additional fix #1547014 and #1593240


author: Sumit Bose <sbose@redhat.com> - 0.8.1-7
changelog:
  - use autosetup macro to simplify patch handling
  - fixed rpmlint warnings in the spec file
  - join failed if hostname is not FQDN [#1649868]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-8
changelog:
  - Various updates for RHEL-7.7
  - many adcli-krb5-????? directories are created /tmp [#1588596]
  - adcli exports kerberos ticket with old kvno [#1642546]
  - [RFE] Have `adcli join` work without FQDN in `hostname` output [#1595911]
  - Improve handling of service principals [#1644311]
  - [RFE] adcli command with --unix-* options doesn't update
    values in UnixAttributes Tab for user [#1337489]
  - [RFE] adcli join should preserve SPN added by adcli preset-computer [#1630187]
  - [RFE] Need an option for adcli command which will show domain join status. [#1622583]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-9
changelog:
  - Fixes for RHEL-7.7 updates
  - additional patch for [RFE] adcli join should preserve SPN added by adcli
    preset-computer [#1630187]
  - new patches for many adcli-krb5-????? directories are created /tmp [#1588596]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-10
changelog:
  - adcli is failing with "Couldn't add keytab entries: FILE:/etc/krb5.keytab:
    Cannot allocate memory" [1665162]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-11
changelog:
  - Fixes and improvements for RHEL-7.8
  - Issue is that with arcfour-hmac as first encryption type in the config ... [#1683745]
  - adcli update --add-samba-data does not work as expected [#1738573]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-14
changelog:
  - Fixes for RHEL-7.9
  - Update' adcli update --add-samba-data ' info under correct section in man adcli [#1774622]
  - [abrt] [faf] adcli: raise(): /usr/sbin/adcli killed by 6 [#1802258]


author: Sumit Bose <sbose@redhat.com> - 0.8.1-15
changelog:
  - More fixes for RHEL-7.9
  - No longer able to delete computer from AD using adcli [#1840752]
  - adcli: presetting $computer in $domain domain failed: Cannot set computer
    password: Authentication error [#1762633]


author: Stef Walter <stefw@redhat.com> - 0.7.5-1
changelog:
  - Update to upstream point release 0.7.5
  - Workaround for discovery via IPv6 address [#1004442]
  - Correctly put IPv6 addresses in temporary krb5.conf


author: Sumit Bose <sbose@redhat.com> - 0.8.1-1
changelog:
  - Update to upstream release 0.8.1
  - Rebase adcli in RHEL-7.3 to version 0.8.0 [#1292530]
  - Support Host Keytab renewal [#1288485]
  - realmd not joining AD so ssh gssapi-with-mic works [#1061371]
  - technically wrong length checks in binary parsers  [#1027905]
  - avoid alloca in _adcli_ldap_have_in_mod [#1027889]
  - [RFE] adcli --stdin-password should be able to strip newline character from
    the input [#1134330]


author: Than Ngo <than@redhat.com> - 1.15-21
changelog:
  - Resolves: #1711051, CVE-2019-8383 denial of service
  - Resolves: #1710910, CVE-2019-8379 null pointer dereference


author: Java SIG <java-devel@lists.fedoraproject.org> - 1.13.1-6
changelog:
  - Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
  - Replace maven BuildRequires with maven-local


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.13.1-8
changelog:
  - Complete spec file rewrite
  - Build with xmvn
  - Split into multiple subpackages, resolves: rhbz#916142
  - Update to current packaging guidelines


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 2.5-9
changelog:
  - also remove include/agg_conv_gpc.h as it also carries a copy of the non-Free
    GPC license (upstream also recommends removing that file under
    http://www.antigrain.com/license/index.html#toc0005) (#559611)


author: Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-4
changelog:
  - added patch to fix aide in FIPS mode
  - use only FIPS approved digest algorithms in aide.conf so that
    aide works by default in FIPS mode


author: Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-6
changelog:
  - warn if processing prelinked binary objects and the prelink binary
    is not available
    Resolves: rbhz#1004826


author: Daniel Kopecek <dkopecek@redhat.com> - 0.15.1-10
changelog:
  - Updated the default configuration file. New defaults contributed
    by Steve Grubb.
    Resolves: rhbz#1304334


author: Steve Grubb <sgrubb@redhat.com> - 0.14-3
changelog:
  - Fix bz 590561 aide does not detect the change of SElinux context
  - Fix bz 590566 aide reports a changed file when it has not been changed


author: Jaroslav Kysela <jkysela@redhat.com> - 1.0.25-1
changelog:
  - Updated to 1.0.25
  - Moved plugin specific configuration from /etc/alsa/pcm to /usr/share/alsa/alsa.conf.d


author: Rahul Sundaram <sundaram@fedoraproject.org> - 1.0.26.1-3
changelog:
  - remove vendor tag from desktop file. https://fedorahosted.org/fpc/ticket/247
  - clean up spec to follow current guidelines
  - don't build -tools for RHEL. Bill Nottingham patch. Resolves rhbz#586030


author: Jaroslav Kysela <jkysela@redhat.com> - 1.1.0-1
changelog:
  - Updated to 1.1.0
  - Enable hda-verb, hdajackretast, hdajacksensetest for i686/x86_64
  - Resolves: rhbz#1172560


author: Tim Jackson <rpm@timj.co.uk> - 1.0.25-4
changelog:
  - Move udev rules to /lib/udev/rules.d (rhbz #748206)
  - remove %BuildRoot and %clean sections; no longer required


author: Jaroslav Kysela <jkysela@redhat.com> - 1.0.27.1-1
changelog:
  - Updated to 1.0.27.1
  - Updated alsa-info.sh to 0.4.61
  - Remove dependency on the dialog package (it is optional for alsa-info.sh)


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 7.1.1-19.1
changelog:
  - ALTPHP-1501: Update to 7.1.1-19
  - Updated libwebp to 1.3.2
  - Added package with libraries for static linking
  - Build with newer libraries for RHEL6


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 7.1.1-43.1
changelog:
  - ALTPHP-1896: Update to 7.1.1-43
  - ALTPHP-1920: Update libwebp to 1.5.0
  - ALTPHP-1932: Fix perfomance issues


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.0.0-5.20180925gitd0076f5
changelog:
  - Update to commit d0076f507a6027455540e2e4f25f84ca38803e07
  - Set CONFIG_LOWBITDEPTH to 1
  - Fix #1632658


author: Robert-André Mauchin <zebob.m@gmail.com> - 3.1.1-1
changelog:
  - Update to 3.1.1
  - Close: rhbz#1954337
  - Security fix for CVE-2021-30473
  - Fix: rhbz#1961375
  - Fix: rhbz#1961376
  - Security fix for CVE-2021-30475
  - Fix: rhbz#1968017
  - Fix: rhbz#1968018


author: Kamil Dudka <kdudka@redhat.com> 7.33.0-1
changelog:
  - new upstream release
  - fix missing initialization in NTLM code causing test 906 to fail
  - fix missing initialization in SSH code causing test 619 to fail


author: Sergey Fokin <sfokin@cloudlinux.com> - 8.11.0-2
changelog:
  - don't add link to ldap in *.pc file if ldap.pc doesn't exist
  - don't add link to mit-krb5-gssapi in *.pc file if mit-krb5-gssapi.pc.pc doesn't exist


author: Sergey Fokin <sfokin@cloudlinux.com> - 8.19.0-2
changelog:
  - ALTPHP-2119: patch to allow building alt-curlssl11 with OpenSSL 1.1
    (curl 8.19.0 dropped OpenSSL < 3.0 support upstream)
  - Fix OPENSSL_VERSION_STRING -> OPENSSL_VERSION for OpenSSL 1.1 compat
  - Fix doc file references: FAQ -> FAQ.md, TODO -> TODO.md, KNOWN_BUGS -> KNOWN_BUGS.md
  - Disable flaky tests 763, 1501, 1583


author: Nikolai Mardanov <nmardanov@cloudlinux.com> - 8.19.0-3
changelog:
  - ALTPHP-2106: pin alt-nghttp2 runtime requirement to the version we built
    against, to avoid undefined-symbol errors when an older alt-nghttp2 is
    installed alongside a freshly built alt-curlssl11


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 8.19.0-4
changelog:
  - Restore short "OpenSSL/1.1.1w" SSL version string (drop the duplicated
    "OpenSSL " prefix and trailing release date introduced when working
    around OPENSSL_VERSION_STRING for alt-openssl11)


author: Philippe Makowski <makowski[at]fedoraproject.org> 2.5.0.26074.0-2
changelog:
  - Fix wrong assign file for classic and classic common
  - sync the s390(x) utilities list with other arches
  - add libatomic_ops-devel as BR: on non-x86 arches


author: Frediano Ziglio <freddy77@angelfire.com>
changelog:
  - remove dependency from freetds-unixodbc
  - fix field name (Copyright instead of License)
  - updated URL


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 57.1-5
changelog:
  - Merged into unified alt-libicu spec selected by --define icu_version
  - Wire ICU U_TIMEZONE_FILES_DIR to alt-libicu-tzdata via symlink at
    %{_datadir}/tzdata; alt-libicu-tzdata is now a Requires/BuildRequires
  - Apply ICU-22973 / CVE-2025-5222 (genrb buffer overflow): not applied
    for v57 yet (see TODO.md)
  - Drop SOURCE100/101 dep filters, use alt_default_filter
  - Drop downstream ".cloudlinux.1" release suffix; align Release with
    other ICU lines


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 65.1-5
changelog:
  - Merged into unified alt-libicu spec selected by --define icu_version
  - Wire ICU U_TIMEZONE_FILES_DIR to alt-libicu-tzdata via symlink at
    %{_datadir}/tzdata; alt-libicu-tzdata is now a Requires/BuildRequires
  - Apply ICU-22973 / CVE-2025-5222 (genrb buffer overflow)
  - Run %check as two top-level make calls (source/test + xcheck-local)
    to dodge ICU's broken nested-make jobserver pattern; tests now run
    strictly without "||:"


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 71.1-5
changelog:
  - Merged into unified alt-libicu spec selected by --define icu_version
  - Wire ICU U_TIMEZONE_FILES_DIR to alt-libicu-tzdata via symlink at
    %{_datadir}/tzdata; alt-libicu-tzdata is now a Requires/BuildRequires
  - Apply ICU-22973 / CVE-2025-5222 (genrb buffer overflow)
  - Release bumped to align with other ICU lines


author: Alex71 <nyrk71@gmail.com> 2.1.0-2
changelog:
  - put libhpdf.so in the devel package and libhpdf-2.1.0.so in the main one
  - removed duplicated README and CHANGES from devel package
  - fixed "E: empty-debuginfo-package" with --enable-debug flag in configure
  - removed INSTALL file
  - added demo/ directory in doc (devel only) as doc


author: Caolan McNamara <caolanm@redhat.com> 4.0-2
changelog:
  - Resolves: rhbz#459698 drop Malayalam patches. Note test with Rachana/Meera
  instead of Lohit Malayalam before filing bugs against icu wrt.
  Malayalam rendering


author: Brian Aker <brian@tangent.org> - 1.0.8
changelog:
  * Fri Jan  8 2010 Brian Aker <brian@tangent.org> - 0.37
  - Modified to be explicit in install include files.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.0-3
changelog:
  - Use C.UTF-8 locale
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Mosaab Alzoubi <moceap@hotmail.com> - 0.7.0-4
changelog:
  - First build on EPEL8
  - Use one branch to build on Fedora and EPEL
  - Use python3 as BR except EPEL7
  - Use LC_ALL=en_US.UTF-8 in EPEL7


author: Sergey Fokin <sfokin@cloudlinux.com> - 1.11.1-4
changelog:
  - ALTPHP-2484: Fix CVE-2026-55200 (transport.c OOB write), CVE-2026-55199
    (EXT_INFO handler DoS), CVE-2025-15661 (sftp_symlink OOB read)


author: Remi Collet <remi@remirepo.net> - 1.3.2-1
changelog:
  - update to 1.3.2
  - drop multilib header hack
  - change URL to https://libzip.org/
  - test suite now ok on all arch


author: Sergey Kokhan <skokhan@cloudlinux.com> - 5.3.7-2
changelog:
  - ALMODP-112: disable nodejs handler by default
  - ALMODP-111: allow PassengerFriendlyErrorPages PassengerAppEnv passenger directives in htaccess


author: Sergey Kokhan <skokhan@cloudlinux.com> - 5.3.7-4
changelog:
  - ALMODP-121: Removed files with 1667 uid
  - ALMODP-120: fix httpd24-alt-mod-passenger spec for new httpd24-httpd


author: Rostyslav Tulchii <rtulchii@cloudlinux.com> - 5.3.7-6
changelog:
  - ALMODP-134: Fix write application custom passenger log to user's tmp under cagefs
  - ALMODP-135: Deleted writing warning to main apache log when using user's custom log


author: Sergey Kokhan <skokhan@cloudlinux.com> - 5.3.7-14
changelog:
  - ALMODP-143: httpd24-alt-mod-passenger installation paths for mod_passenger.so and mod_passenger.conf changed


author: Andrei Zheregelia <azheregelia@cloudlinux.com> 6.0.26-3
changelog:
  - CLOS-3362: Migrate alt-mod-passenger to use cloudlinux-venv provided Python instead of alt-python37


author: Haluk Yilmaz <hyilmaz@cloudlinux.com> 6.0.26-4
changelog:
  - CLOS-3500: Add CL10 support for passenger by adding the required compilation flag for successful build


author: Andrei Zheregelia <azheregelia@cloudlinux.com> 6.0.26-5
changelog:
  - CLOS-3629: Bring an override for httpd systemd service to change PrivateHome from "read-only" to "no"


author: Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> 6.0.26-6
changelog:
  - CLOS-4148: Security hardening and eliminate race condition
  - CLOS-4148: Switch build dependency to alt-ruby33 (drop alt-ruby21/alt-ruby22 requirements)


author: Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> 6.0.26-7
changelog:
  - CLOS-4285: Improved Passenger-related handling, validation, and robustness across multiple areas
  - CLOS-4148: Restore .htaccess scope for selector directives (regression fix)


author: Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> 6.0.26-8
changelog:
  - CLOS-4364: Allow PassengerAppLogFile in user .htaccess so cloudlinux-selector --passenger-log-file works for end users


author: Ivan Kuliashov <ikuliashov@cloudlinux.com> - 12.22.12-8
changelog:
  - CVE-2023-38552: use tamper-proof integrity check function to prevent tampering
    with Hash class internals in policy mechanism


author: Ivan Kuliashov <ikuliashov@cloudlinux.com> - 12.22.12-10
changelog:
  - CVE-2024-22019: fix improper exception handling in SignTraits::DeriveBits()
    that could lead to remote denial of service when malformed input is processed


author: Krystyna Tomaszewa <ktomaszewa@cloudlinux.com> - 12.22.12-11
changelog:
  - CVE-2022-32213: fix missing CR validation in header separators to prevent
    HTTP request smuggling via malformed headers
  - CVE-2022-32214: fix Transfer-Encoding header validation to reject invalid
    and repeated chunked encoding values
  - CVE-2022-32215: fix Transfer-Encoding header parsing to prevent smuggling
    attacks via conflicting encoding declarations
  - CVE-2022-35256: fix header overflow calculation to properly detect and
    reject oversized HTTP headers


author: Ivan Kuliashov <ikuliashov@cloudlinux.com> - 12.22.12-13
changelog:
  - CVE-2023-46809: fix a timing‑side‑channel flaw in the RSA PKCS#1 v1.5
    decryption logic, preventing a Marvin‑style padding‑oracle attack that
    could allow recovery of sensitive data


author: Krystyna Tomaszewa <ktomaszewa@cloudlinux.com> - 12.22.12-14
changelog:
  - CVE-2024-22025: pause stream if outgoing buffer is full to prevent resource
    exhaustion during decompression


author: Juan Carlos Garcia <jgarcia@cloudlinux.com> - 12.22.12-15
changelog:
  - CVE-2025-59465: add TLSSocket default error handler to prevent unhandled rejection
    on abrupt socket close


author: Wojciech Tatarski <wtatarski@cloudlinux.com> - 12.22.12-16
changelog:
  - CVE-2025-55131: refactor unsafe buffer creation to remove zero-fill toggle
    mechanism that could expose uninitialized memory when using vm module with
    timeout options, preventing potential information disclosure


author: Krystyna Tomaszewa <ktomaszewa@cloudlinux.com> - 12.22.12-17
changelog:
  - CVE-2025-59466: rethrow stack overflow exceptions in async_hooks instead of
    calling FatalException
  - CVE-2026-21637: route pskCallback exceptions through error handlers to prevent
    remote attackers from crashing TLS servers


author: Ivan Kuliashov <ikuliashov@cloudlinux.com> - 14.21.3-2.tuxcare.els6
changelog:
  - CVE-2024-22019: fix improper exception handling in SignTraits::DeriveBits() that
    could lead to remote denial of service when malformed input is processed


author: Krystyna Tomaszewa <ktomaszewa@cloudlinux.com> - 14.21.3-4
changelog:
  - CVE-2023-32559: disable process.binding() when policy is enabled,
    update deprecations and errors docs, add new tests ensuring denial behavior,
    include new policy + app test fixtures


author: Krystyna Tomaszewa <ktomaszewa@cloudlinux.com> - 14.21.3-5
changelog:
  - CVE-2023-30589: fix llhttp parser to properly validate LF after CR
    in HTTP header fields, add lenient flag checks before allowing CR without LF,
    add test file to verify the fix prevents request smuggling attacks


author: Ivan Kuliashov <ikuliashov@cloudlinux.com> - 14.21.3-11
changelog:
  - CVE-2023-46809: fixes a timing‑side‑channel flaw in the RSA PKCS#1 v1.5
    decryption logic, preventing a Marvin‑style padding‑oracle attack that
    could allow recovery of sensitive data.


author: Juan Carlos Garcia <jgarcia@cloudlinux.com> - 1.1.1p-4
changelog:
  - Fix CVE-2026-45447 (PKCS7_verify use-after-free on empty digestAlgorithms)
  - Build on CL8 again: drop ExcludeArch: x86_64 (ELS-2378)


author: Ivan Kuliashov <ikuliashov@cloudlinux.com> - 16.20.2-8
changelog:
  - CVE-2023-45143: clear Cookie and Host headers on cross-origin redirects to
    prevent sensitive data leakage


author: Krystyna Tomaszewa <ktomaszewa@cloudlinux.com> - 16.20.2-12
changelog:
  - CVE-2026-21637: route pskCallback exceptions through error handlers to prevent
    remote attackers from crashing TLS servers
  - CVE-2025-59466: rethrow stack overflow exceptions in async_hooks instead of
    calling FatalException


author: Wojciech Tatarski <wtatarski@cloudlinux.com> - 16.20.2-13
changelog:
  - CVE-2025-55131: refactor unsafe buffer creation to remove zero-fill toggle
    mechanism preventing race condition that could expose uninitialized memory


author: Levon Matshkalyan <lmatshkalyan@cloudlinux.com> - 16.20.2-16
changelog:
  - Obsolete alt-nodejs16-openssl{,-devel,-libs} < 1.1.1e on el8+ to prevent
    OPENSSL_1_1_1e symbol version mismatch when stale alt OpenSSL in RPATH
    shadows system OpenSSL


author: Krystyna Tomaszewa <ktomaszewa@cloudlinux.com> - 18.20.8-5
changelog:
  - CVE-2026-21637: wrap pskCallback and ALPNCallback invocations in try-catch
    blocks to route exceptions through error handlers
  - CVE-2025-59466: rethrow stack overflow exceptions in async_hooks instead of
    calling FatalException


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 6.9.1-2
changelog:
  - Rebuild from zvetlik/rh-nodejs6
  - newer releases have problems with debug
  - add procps-ng for tests
  - remove unused patches


author: Matus Honek <mhonek@redhat.com> - 2.4.46-3
changelog:
  - MozNSS Compat. Layer: Make log messages more clear (#1598103)
  - MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1595203)


author: Matus Honek <mhonek@redhat.com> - 2.4.46-6
changelog:
  - Build with LDAP_USE_NON_BLOCKING_TLS (#1594928)
  - Remove unused leftover MozNSS Compat. Layer references (cont.) (#1557967)


author: Areg Gasparyan <agasparyan@cloudlinux.com> - 1:1.1.1w-3
changelog:
  - CVE-2025-68160: fix heap buffer overflow in BIO_f_linebuffer when next BIO
    performs short writes
  - CVE-2025-69418: fix OCB AES-NI/HW stream path leaving trailing bytes
    unauthenticated/unencrypted by advancing pointers after stream processing
  - CVE-2025-69419: fix out-of-bounds write in OPENSSL_uni2utf8 and do_buf
    by checking return code of UTF8_putc/bmp_to_utf8
  - CVE-2025-69420: fix missing ASN1_TYPE validation in TS_RESP_verify_response
    for signing certificate attributes
  - CVE-2025-69421: fix NULL pointer dereference in PKCS12_item_decrypt_d2i
    by adding NULL check for oct parameter
  - CVE-2026-22795: fix ASN1_TYPE validation in PKCS12 parsing (p12_kiss.c)
    and s_client.c before accessing union members
  - CVE-2026-22796: fix ASN1_TYPE type confusion in PKCS7_digest_from_attributes
    by validating type before accessing as OCTET_STRING


author: Juan Carlos Garcia <jgarcia@cloudlinux.com> - 1:1.1.1w-3.2
changelog:
  - CVE-2023-5678: fix excessive time in DH check/generation with large Q
    parameter by adding bounds checks in DH_check_pub_key and DH_generate_key
  - CVE-2024-0727: fix PKCS12 decoding NULL pointer dereference by adding NULL
    checks where ContentInfo data can be NULL


author: Juan Carlos Garcia <jgarcia@cloudlinux.com> - 1:1.1.1w-3.3
changelog:
  - CVE-2026-28387: fix use-after-free in DANE client code by using X509_free()
    instead of OPENSSL_free() to properly release reference-counted X509 objects
  - CVE-2026-28388: fix NULL pointer dereference when processing a delta CRL
    that has a Delta CRL Indicator but lacks a CRL Number extension
  - CVE-2026-28389: fix NULL pointer dereference in CMS KeyAgreeRecipientInfo
    processing when KeyEncryptionAlgorithmIdentifier omits the optional
    parameter field, by using safe X509_ALGOR_get0() extraction
  - CVE-2026-28390: fix NULL pointer dereference in CMS KeyTransportRecipientInfo
    processing when RSA-OAEP SourceFunc parameters are missing, by using safe
    X509_ALGOR_get0() extraction and OPENSSL_memdup() for label data


author: Juan Carlos Garcia <jgarcia@cloudlinux.com> - 1:1.1.1w-3.4
changelog:
  - CVE-2026-45447: fix use-after-free in PKCS7_verify triggered by a crafted
    PKCS#7 / S-MIME message with an empty digestAlgorithms ASN.1 SET, which made
    OpenSSL free a caller-owned BIO; free the BIO chain explicitly and stop at
    the caller-supplied indata BIO


author: Lubomir Rintel <lkundrak@v3.sk> 7.8-1
changelog:
  - Update to 7.8, drop upstreamed patches
  - Fix destination of documentation (#427763)
  - Use buildroot macro consistently
  - Separate the static library, as per current Guidelines
  - Satisfy rpmlint


author: Tomas Hoger <thoger@redhat.com> - 7.3-3
changelog:
  - Backport patch from upstream pcre 7.6 to address buffer overflow
    caused by "a character class containing a very large number of
    characters with codepoints greater than 255 (in UTF-8 mode)"
    CVE-2008-0674, #431660
  - Try re-enabling make check again.


author: Sergey Fokin <sfokin@cloudlinux.com> - 1-43.1
changelog:
  - fix version compare in multiphp_reconfigure script
  - exec /multiphp_reconfigure after installation for cPanel > 100.0


author: Sergey Fokin <sfokin@cloudlinux.com> - 1-46
changelog:
  - rewrite code for versions comparing in multiphp_reconfigure.py script
  - rewrite alt-php-mysql-reconfigure.py for ubuntu support


author: Sergey Fokin <sfokin@cloudlinux.com> - 1-50
changelog:
  - ALTPHP-1376: fix detecting libmysqlclient.so version
  - ALTPHP-1396: restore alt-php.cfg if it's broken


author: Sergey Fokin <sfokin@cloudlinux.com> - 1-54
changelog:
  - ALTPHP-1582: add support cl-MariaDB1011
  - ALTPHP-1626: return mysqli.so for alt-php >= 82
  - ALTPHP-1637: rebuild with system python from BaseOS repo


author: Sergey Fokin <sfokin@cloudlinux.com> - 1-63
changelog:
  - do not create symlinks to mysqli on plesk
  - hardcode x86_64-linux-gnu to lib path in alt-php-mysql-reconfigure
    script


author: Sergey Fokin <sfokin@cloudlinux.com> - 1-64
changelog:
  - for plesk panel create symlinks:
      mysqli.so -> nd_mysqli.so
      pdo_mysql.so -> nd_pdo_mysql.so
  - for plesk panel do not create any symlinks for ini configs


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-65
changelog:
  - ALTPHP-2180: Fixed processing mysql.so (for PHP 5x) in Plesk environment
  - ALTPHP-2180: Call alt-php-mysql-reconfigure in Plesk environment wthout installed bindings


author: Levon Matshkalyan <lmatshkalyan@cloudlinux.com> - 1-70
changelog:
  - ALTPHP-2242: Add --driver native|binding switch to reconfigure: toggles the
    active mysql driver (native nd_mysqli/nd_pdo_mysql vs client-lib bindings)
    per alt-php version. Bindings stay managed for all versions.
  - ALTPHP-2242: Fix MariaDB 11.x binding-name mapping (11.8 -> mariadb118, not
    mariadb1108) so switching to --driver binding works on Debian 13 / MariaDB
    11.x systems.


author: Eduard Abdullin <eabdullin@cloudlinux.com> - 7.4.16-2
changelog:
  - ALTPHP-1053: Update move_override_ini patch
  - ALTPHP-1038: Update litespeed log patch
  - ALTPHP-1082: Add alt-php-pdo requires for alt-php-mysqlnd and alt-php-firebird


author: Eduard Abdullin <eabdullin@cloudlinux.com> - 7.4.21-3
changelog:
  - ALTPHP-1154: Fix libxml requires
  - ALTPHP-1156: Get rid of manipulations with enabling extensions (mysqli.so) in default.ini


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 7.4.33-4
changelog:
  - Fix for Harden PHP
  - CVE-2022-31631: Fix integer overflow that could cause PDO::quote() to return an improperly quoted string


author: Nikita Ivanov <nivanov@cloudlinux.com> - 7.4.33-7
changelog:
  - Fix for hardened PHP
  - CVE-2023-0567: Fix validation of malformed BCrypt hashes
  - CVE-2023-0568: Fix array overrun when appending slash to paths
  - CVE-2023-0662: Fix DOS vulnerabality by limiting number of parsed
    multipart body parts and printing upload limit exceed error message only once


author: Sergey Fokin <sfokin@cloudlinux.com> - 7.4.33-10
changelog:
  - ALTPHP-1531: add provides alt-php-handler-lsphp and alt-php81-handler-lsphp
  - remove changes from ALTPHP-1508


author: Nikita Ivanov <nivanov@cloudlinux.com> - 7.4.33-12
changelog:
  - Fix for hardened PHP
  - CVE-2023-3823: Fix external entity loading in XML without enabling by
    sanitizing libxml2 globals before parsing
  - CVE-2023-3824: Fix buffer mismanagement in phar_dir_read()


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1:1.10.3-1
changelog:
  - update PEAR to 1.10.3
  - update ArchiveTar to 1.4.2
  - update Structures Graph to 1.1.1
  - update XML_Util to 1.4.2
  - update Console_Getopt to 1.4.1


author:
  Alexandr Demeshko <ademeshko@cloudlinux.com>, Sergey Kozhekin <skozhekin@cloudlinux.com>, Daria Kavchuk <dkavchuk@cloudlinux.com> - 0.1-3

changelog:
  - XRAY-114: dump statistics on agent restarts
  - XRAY-112: Implement SSA manager get-report API
  - XRAY-95: SSA manager enable-ssa, disable-ssa APIs added
  - XRAY-109: Implement SSA Decision maker
  - XRAY-110: SSA manager set-config API added
  - Null check for HOST and URI added
  - XRAY-106: SSA Request processor
  - XRAY-105: ssa read and validate configuration


author: Sergey Kozhekin <skozhekin@cloudlinux.com>, Daria Kavchuk <dkavchuk@cloudlinux.com> - 0.1-6
changelog:
  - fixes for Sentry events CLOS-SSA-N, CLOS-SSA-C, CLOS-SSA-D
  - XRAY-117: track current date in storage
  - XRAY-120: SSA ClickHouse reporting
  - XRAY-119: SSA e-mail reporting
  - XRAY-118: selective ssa-agent restarts


author: Alexandr Demeshko <ademeshko@cloudlinux.com>, Daria Kavchuk <dkavchuk@cloudlinux.com> - 0.1-7
changelog:
  - XRAY-139: catch RetryErrors in StatSender
  - XRAY-127: SSA tests added
  - XRAY-137: URI escaping added


author: Sergey Kozhekin <skozhekin@cloudlinux.com> - 0.1-8
changelog:
  - XRAY-150: The approach to obtaining the current IP address has been changed
  - XRAY-162: Adding "clos_ssa.ini" for unsupported phps excluded
  - XRAY-216: Support ea-phpXY on CloudLinuxOS 8 (cPanel) has been added


author: Daria Kavchuk <dkavchuk@cloudlinux.com> - 0.1-9
changelog:
  - XRAY-248: new mechanism of retrieving FROM and TO addressed for email reporting
  - XRAY-247: new style of SSA email reports
  - XRAY-246: set two-digit precision for 'Average duration' field
  - XRAY-237, XRAY-245: SSA adopted for CloudLinux Solo edition


author:
  Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Sergey Kozhekin <skozhekin@cloudlinux.com> - 0.1-11

changelog:
  - XRAY-256: hide unused settings for Cloudlinux Solo edition
  - Fix default package Provides overriding


author:
  Alexandr Demeshko <ademeshko@cloudlinux.com>, Sergey Kozhekin <skozhekin@cloudlinux.com>, Serhii Kokhan <skokhan@cloudlinux.com>, Dasha Kavchuk <dkavchuk@cloudlinux.com> - 0.2-1

changelog:
  - XRAY-423: rework the output format of 'status' CLI API; CL Shared malfuction added
  - XRAY-415: cloudlinux-autotracing status CLI API implemented; additional checks for malfunctions added
  - XRAY-414: SSA and auto tracing made enabled by default for new istallations only; throttled URLs excluded from SSA daily report; auto tracing configuration options partly renamed
  - XRAY-390: fetch configuration values from remote endpoint implemented
  - XRAY-369: WordPress detection added to ssa extension
  - XRAY-365: rules for autotracing decision module improved
  - XRAY-389: count throttled requests in ssa agent
  - XRAY-371: skip of repeated URLs within 10 days timeframe added to autotracing decision module
  - XRAY-391: enable all, disable all - removes users configs
  - XRAY-348: enable/disable CLI API to manage autotracing implemented
  - XRAY-360: throttling counter added to SSA
  - XRAY-373: status --list-disabled API implemented; skip of sites with disabled autotracing added into autotracing decision module
  - XRAY-370: skip of sites with Nginx cache enabled added into autotracing decision module
  - XRAY-356: autotracing decision module core implementation


author:
  Alexandr Demeshko <ademeshko@cloudlinux.com>, Dasha Kavchuk <dkavchuk@cloudlinux.com>, Dmitriy Leonov <dmleonov@cloudlinux.com> - 0.2-2

changelog:
  - XRAY-422: alt-php81 support added
  - XRAY-460: Fixed kernel version comparison
  - XRAY-462, XRAY-464, XRAY-465: proper handling of old-formatted stats in AutoTracer and DecisionMaker modules


author: Dasha Kavchuk <dkavchuk@cloudlinux.com> - 0.2-3
changelog:
  - XRAY-429: autotracing telemetry added
  - XRAY-483: fixed issues with generating SSA reports and internal filters of autotracing module


author:
  Dasha Kavchuk <dkavchuk@cloudlinux.com>, Anastasia Lutsiuk <alutsiuk@cloudlinux.com>, Sergey Kokhan <skokhan@cloudlinux.com> - 0.2-4

changelog:
  - XRAY-524 Fixed issue related to cloudlinux-autotracing Unlink Flaw
  - XRAY-526: Removed default value for debug log file
  - XRAY-534: Fixed getting panel users' list and IP address


author:
  Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Dasha Kavchuk <dkavchuk@cloudlinux.com> - 0.3-4

changelog:
  - CLPRO-136: Allow slow site analyzer to work inside VZ containers
  - XRAY-609: Skip URLs with unavailable domain data from autotracing


author: Anastasia Lutsiuk <alutsiuk@cloudlinux.com>, Dasha Kavchuk <dkavchuk@cloudlinux.com> - 0.3-8
changelog:
  - CLPRO-228: Add support of CL9
  - XRAY-711: Fix copying clos_ssa extensions for DirectAdmin
  - XRAY-721: Enable autotracing, but block it from working in case of malfunctions present


author:
[cell repeats an earlier one in this file: 100 characters]

changelog:
  - CLPRO-136: Allow slow site analyzer to work inside containers
  - XRAY-609: Skip URLs with unavailable domain data from autotracing


author: Daniil Danilkin <ddanilkin@cloudlinux.com> - 0.4-4
changelog:
  - Adds explicit error if user's CL isn't registered (CLPRO-1487)
  - Enable/disable SSO twice isn't a error anymore for CLI (CLPRO-1553)


author: Anastasia Lutsiuk <alutsiuk@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 0.4-5
changelog:
  - Replace edition specific check with universal cpapi feature supported (CLPRO-1531)
  - Increase string length parameter during Sentry init (CLPRO-1578)


author: Anastasia Lutsiuk <alutsiuk@cloudlinux.com>, Sergey Kokhan <skokhan@cloudlinux.com> - 0.4-7
changelog:
  - Improve report email templates (CLPRO-1055)
  - Extend logging with detection of WP2 environment (CLPRO-1899)
  - Simplified the code of building SSA extensions (CLPRO-1946)
  - Added alt-php82 support for CL6 (CLPRO-1947)
  - Added ea-php83 support (CLPRO-1948)


author: Denis Komandyr <dkomandyr@cloudlinux.com> - 0.4-8
changelog:
  - Fixed SSA service when ssa.conf is empty (CLPRO-566)
  - Added special characters escaping in database query (CLPRO-2043)


author: Roman Krompets <rkrompets@cloudlinux.com> - 0.4-10
changelog:
  - Fixed an error on DirectAdmin that lead to the 'xray.so' extension was not placed to extensions dir (CLPRO-1409)


author: Roman Krompets <rkrompets@cloudlinux.com>, Ruslan Koliada <rkoliada@cloudlinux.com> - 0.4-16
changelog:
  - CLPRO-1623: Fix Database error for PHP Slow Site Analyzer
  - CLPRO-2695: Add linefeed in clos_ssa.ini


author: Roman Krompets <rkrompets@cloudlinux.com> - 0.4-18
changelog:
  - CLPRO-2911: Prevent the creation of clos_php.ini files for PHP versions that are not yet supported by alt-php-ssa.


author: Roman Krompets <rkrompets@cloudlinux.com> - 0.4-19
changelog:
  - Added PHP 8.5 support for Slow Site Analyzer (CLPRO-2910)
  - Fix conflicts between X-Ray and Slow Site Analyzer modules on PHP85 (CLPRO-2929)


author: Ruslan Koliada <rkoliada@cloudlinux.com> - 0.4-26
changelog:
  - CLPRO-3068: Improved SSA agent input handling, manager operation logging, and configuration validation


author: Ruslan Koliada <rkoliada@cloudlinux.com> - 0.4-27
changelog:
  - CLPRO-3077: Bound SSA agent memory during daily maintenance on large databases
  - CLPRO-3076: Improved disable-ssa to fully stop and disable the agent's systemd units
  - CLPRO-3118: Raise ssa-agent TasksMax, pin numpy BLAS threads to one, and keep the accept loop alive when thread creation fails
  - CLPRO-3175: Fixed ssa-agent.service failing to start on servers without CageFS installed


author: Ruslan Koliada <rkoliada@cloudlinux.com> - 0.4-30
changelog:
  - CLPRO-3235: Grant ssa-agent write access to InterWorx's log tree on InterWorx servers
  - CLPRO-3165: Adjusted SSA agent request-intake pacing and streamlined daily reporting and configuration parsing
  - CLPRO-3249: Refined SSA agent logging and diagnostic log file handling
  - CLPRO-3148: Improved per-user autotracing config reads and stale-ini cleanup


author: Daria Kavchuk <dkavchuk@cloudlinux.com>, Sergey Kokhan <skokhan@cloudlinux.com> - 0.3-2
changelog:
  - XRAY-185: calculate throttling fact with threshold in ms
  - XRAY-181: removed max limit for request_ids
  - XRAY-177: libcurl dependency added
  - XRAY-100: throttling checks on Agent's side
  - XRAY-159: build xray.so for cPanel CL8
  - XRAY-170: processing init request for getting throttling of request added


author: Daria Kavchuk <dkavchuk@cloudlinux.com>, Sergey Kozhekin <skozhekin@cloudlinux.com> - 0.3-3
changelog:
  - XRAY-212: X-Ray integration script simplified
  - XRAY-186: changed location for xray integration script, added panel_info check
  - XRAY-186: custom panels support added
  - XRAY-180: autostart manipulations added for xray-user-agent
  - XRAY-180: Fixed init.d scripts for agent and user agent
  - XRAY-210: The approach to obtaining the current IP address has been changed


author: Daria Kavchuk <dkavchuk@cloudlinux.com>, Sergey Kozhekin <skozhekin@cloudlinux.com> - 0.3-4
changelog:
  - XRAY-209: incorrect PHP ini path detection for LSPHPX.Y-alt-php handlers on Plesk fixed
  - XRAY-214: FPM services reload restriction added in X-Ray End User plugin
  - XRAY-213: X-Ray integration transferred to public_cp_vendors_api v1.2


author: Daria Kavchuk <dkavchuk@cloudlinux.com>, Sergey Kozhekin <skozhekin@cloudlinux.com> - 0.3-6
changelog:
  - XRAY-260: nginx cache detection added in cloudlinux-xray-user-manager
  - XRAY-239: add copyrights to x-ray
  - XRAY-233: disable/restore nginx cache for user during tracing


author: Daria Kavchuk <dkavchuk@cloudlinux.com>, Alexandr Demeshko <ademeshko@cloudlinux.com> - 0.3-7
changelog:
  - XRAY-201: ignore FPM settings if LiteSpeed is running on cPanel
  - XRAY-254: php80 support added
  - Fix default package Provides overriding
  - XRAY-270: schedstats processing in X-Ray agent
  - XRAY-270: throttling thresholds added
  - XRAY-267: CPU and IO throttling info added to X-Ray extension


author: Daria Kavchuk <dkavchuk@cloudlinux.com>, Alexandr Demeshko <ademeshko@cloudlinux.com> - 0.3-8
changelog:
  - XRAY-113: URI len trimmed
  - XRAY-275: manager module turned into package
  - XRAY-276: stop tracing task even if domain does not exist or ini file is corrupted
  - XRAY-258: added suppport for php.d.location=selector setting
  - XRAY-277: IO and CPU shared throttling threshold added


author: Daria Kavchuk <dkavchuk@cloudlinux.com>, Alexandr Demeshko <ademeshko@cloudlinux.com> - 0.3-9
changelog:
  - XRAY-285: xray.tasks directive value wrapped into double quotes
  - XRAY-293: Skip throttling metrics calculation in case of xray.tasks absence


author:
  Daria Kavchuk <dkavchuk@cloudlinux.com>, Sergey Kozhekin <skozhekin@cloudlinux.com>, Alexandr Demeshko <ademeshko@cloudlinux.com> - 0.3-10

changelog:
  - XRAY-318: drop privileges upon ini file writes
  - XRAY-101: Added check of the subdomain handler
  - XRAY-304: arginfo added


author:
  Alexandr Demeshko <ademeshko@cloudlinux.com>, Sergey Kozhekin <skozhekin@cloudlinux.com>, Daria Kavchuk <dkavchuk@cloudlinux.com> - 0.4-1

changelog:
  - XRAY-319: full backtrace added to system functions
  - XRAY-371: tasks_list retrieving made shared with SSA
  - XRAY-365: tracing_count parameter added for autotracing tasks; exclude autotracing tasks from continuous autocleaning
  - XRAY-387: masking data in SQL queries
  - XRAY-370: shared library for SSA created
  - XRAY-357: Added possibility to create autotracing task
  - XRAY-295: Support of shortcode metrics added
  - XRAY-350: Multiple do_shortcode calls supported
  - XRAY-404: Fixed the issue of creating tracing tasks when user has a disabled shell


author:
  Alexandr Demeshko <ademeshko@cloudlinux.com>, Daria Kavchuk <dkavchuk@cloudlinux.com>, Sergey Kokhan <skokhan@cloudlinux.com> - 0.4-3

changelog:
  - XRAY-472: Temporary revert of XRAY-295, XRAY-319, XRAY-350, XRAY-436
  - XRAY-481: Ability to use local API
  - XRAY-461: Added processing of request method
  - XRAY-456: Fixed issue in curl_exec support for php 8.0+
  - XRAY-428: remove xray.tasks during reconfiguration


author: Daria Kavchuk <dkavchuk@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 0.5-1
changelog:
  - XRAY-508: enable Smart Advice for Solo edition
  - XRAY-505: disable Smart Advice if AccelerateWP is unavailable
  - XRAY-495: restrict cloudlinux-xray-manager and cl-smart-advice utils to be executed as root only
  - XRAY-498: Find possibility to use PHP preload to get data from PHP request
  - XRAY-493: Smart Advice User plugin implemented
  - XRAY-453: advice for SOM module added
  - XRAY-427: advice counters CLI API added
  - XRAY-412: Smart Advice metadata restructed; non-wp and incompatible sites skipped
  - XRAY-337: smart advice local utility
  - XRAY-443: add info.json for WPOS on task start
  - XRAY-489: deprecated elastic* files removed from RPM


author:
  Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Daria Kavchuk <dkavchuk@cloudlinux.com>, Sergey Kokhan <skokhan@cloudlinux.com> - 0.5-3

changelog:
  - XRAY-530: CLI API 'status' enhanced in case of processing a 'pending' advice
  - XRAY-526: Removed default value for debug log file
  - XRAY-513: Send website incompatibilities to x-ray microservice
  - XRAY-511: Fix case of empty file-marker while processing CPU throttling in python agent
  - XRAY-491: Advice status implemented


author:
  Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Dmitriy Leonov <dmleonov@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, Sergey Kokhan <skokhan@cloudlinux.com>, Daria Kavchuk <dkavchuk@cloudlinux.com> - 0.5-7

changelog:
  - XRAY-624: PHP version detection on cPanel with default alt-php fixed
  - XRAY-573: Added support of ea-php81 to X-Ray
  - XRAY-617: Fixed memory corruption
  - XRAY-563: Improve tracing tasks caching in X-Ray Agent
  - XRAY-564: Move request number counting logic to the server side
  - XRAY-607: Implement command for getting user sites statuses
  - XRAY-587: Do not send metadata when clwpos utility fails
  - XRAY-575: Add sentry reporting for PHP shortcode profiler
  - XRAY-600: Implement autocompleting of stuck tasks
  - XRAY-599: Stop task when it is in stopped/completed status


author:
  alutsiuk <alutsiuk@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com>, Daria Kavchuk <dkavchuk@cloudlinux.com> - 0.5-8

changelog:
  - XRAY-635: Make X-Ray work inside VZ container
  - XRAY-637: Fix accidental losing of requests and request counters
  - XRAY-632: Add processing of shortcode callback declared via __call magic method
  - XRAY-633: Improving object export to Sentry events in X-Ray PHP profiler
  - XRAY-634: Add newline to xray-tasks cron


author: alutsiuk <alutsiuk@cloudlinux.com>, Daria Kavchuk <dkavchuk@cloudlinux.com>- 0.5-9
changelog:
  - AWP-180: Implement ability to rollback advice
  - AWP-174: Do not block SmartAdvice via feature marker
  - AWP-150: Change AWP allow command in Smart Advice apply
  - AWP-153: Change smart advice messages according to new names


author:
  alutsiuk <alutsiuk@cloudlinux.com>, Daria Kavchuk <dkavchuk@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 0.5-10

changelog:
  - AWP-184: Extend cl-smart-advice list with detailed_description
  - XRAY-630, XRAY-650, XRAY-652, XRAY-656, XRAY-657: Develop SmartAdvice plugin
  - XRAY-631: Implement installing of SmartAdvice plugin
  - XRAY-649: Wrong filehandling fixed
  - XRAY-645: Detect source of cl-smart-advice apply/rollback


author:
  Dmitriy Leonov <dmleonov@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com>, Daria Kavchuk <dkavchuk@cloudlinux.com> - 0.5-11

changelog:
  - XRAY-664: Replace PHP module "sockets" with stream functions
  - XRAY-667: Add feedback link to the SmartAdvice WP plugin
  - XRAY-668: Add ability to give the reason of advice rollback


author:
  Dmitriy Leonov <dmleonov@cloudlinux.com>, Daria Kavchuk <dkavchuk@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 0.5-12

changelog:
  - XRAY-669: Create question window in case if client rollback Advice in WordPress SmartAdvice Plugin
  - XRAY-627: Added support for CloudLinux Admin edition
  - XRAY-672: Fix SmartAdvice Wordpress plugin installation on Solo edition
  - XRAY-662: Start Xray End-user Agent by default on Solo edition
  - XRAY-666: Extend params list for Wordpress Smart Advice plugin to support Advice alerting
  - XRAY-665: Implement the function of sending emails when new Advice
  - XRAY-670: Improve handling of magic methods in php profiler


author: Timur Kalimullin <tkalimullin@cloudlinux.com>, Dmitriy Leonov <dmleonov@cloudlinux.com> - 0.5-13
changelog:
  - XRAY-689: Improve WordPress compatibility check with Smart Advice plugin
  - XRAY-686: Rename sender for cPanel users
  - XRAY-685: Add WordPress notice when new Advice


author:
  Timur Kalimullin <tkalimullin@cloudlinux.com>, Mariia Mozgunova <mmozgunova@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, Dmitriy Leonov <dmleonov@cloudlinux.com> - 0.5-14

changelog:
  - XRAY-699: Continuous task stops collecting requests.
  - XRAY-641: Autocomplete of tasks fails on "on hold" tasks.
  - XRAY-697: Sort advices by status, display notes for advices in SmartAdvice plugin
  - XRAY-681: Displaying detailed errors in SmartAdvice plugin
  - XRAY-675: Improve the js part of the SmartAdvice plugin
  - CLPRO-228: Adapt for CL9
  - AWP-230: Adapt AccelerateWP imports
  - XRAY-691: Adapt writing AccelerateWP info files to new format
  - XRAY-712: Added cacheability metrics to xray extension
  - XRAY-695: Implement collecting metrics to define page cacheability
  - XRAY-723: Save the requests list of the advice in SmartAdvice plugin
  - XRAY-728: Adapt smart advice wordpress plugin for Plesk
  - XRAY-727: Adapt WP SmartAdvice to Plesk panel


author:
  alutsiuk <alutsiuk@cloudlinux.com>, Dasha Kavchuk <dkavchuk@cloudlinux.com>, Dmitriy Leonov <dmleonov@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com>, Mariia Mozgunova <mmozgunova@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> - 0.5-15

changelog:
  - CLPRO-271: Move projects from sentry.cloudlinux to cl.sentry.cloudlinux.
  - AWP-221: Implement CDN feature managing utilities
  - XRAY-724: Update cl-smart-advice to handle CDN and Premium advice
  - XRAY-696: Use wp-cli wrapper instead of original wp-cli
  - XRAY-731: Fix Smart Advice plugin symlink after restoring backup from WP ToolKLit or ZIP
  - XRAY-737: Add hiding ROC Pro promotion styles to WP SmartAdvice
  - XRAY-740: Add the ability to subscribe with WHMCS
  - AWP-365: Extend SmartAdvice to interact with suites
  - AWP-384: Disable fuzzy parsing of arguments
  - XRAY-752: Error handling for paid suites


author: Dasha Kavchuk <dkavchuk@cloudlinux.com> - 0.5-16
changelog:
  - XRAY-743: Improve user's name detection in X-Ray End-user plugin; improve detection of user's PHP processes


author:
  Sergey Kokhan <skokhan@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, Dmitriy Leonov <dmleonov@cloudlinux.com>, Martin Krcho <mkrcho@cloudlinux.com>, Dasha Kavchuk <dkavchuk@cloudlinux.com> - 0.5-17

changelog:
  - XRAY-783: Added collection of blocking resources to xray extension
  - XRAY-776: Image Optimization advice type implemented
  - XRAY-750: Critical CSS advice type implemented
  - XRAY-673: add CDN advice support
  - AWP-414: Adapt SmartAdvice plugin for CDN activation
  - XRAY-770: Fix unique auth key reading function
  - XRAY-765: Handled error in the SmartAdvice plugin - Json [email] is invalid
  - AWP-441: Add to SmartAdvice method to get options
  - XRAY-773: Implement applying and rollback a new feature in the SmartAdvice WP plugin
  - AWP-415: Add terms agreement to CLI tools
  - XRAY-785: Fix applying advice in Smart Advice plugin
  - AWP-476: Implement advanced rules for Critical CSS advice V1
  - XRAY-790: Implement applying and rollback of image optimization feature in the SmartAdvice WP plugin
  - CLPRO-329: Critical CSS advice support added
  - CLPRO-343: Image Optimization advice support added
  - XRAY-774: Do not display notifications in SmartAdvice plugin without advice
  - XRAY-769: Add Terms and Conditions in SmartAdvice plugin
  - XRAY-767: Fix name collision between x-ray and lvemanager cli_utils
  - XRAY-720: Added support of ea-phpXY on CL9


author:
  alutsiuk <alutsiuk@cloudlinux.com>, Dmitriy Leonov <dmleonov@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com>, Sergey Kokhan <skokhan@cloudlinux.com> - 0.5-18

changelog:
  - CLPRO-324: Add subscription warning to xray utilities
  - CLPRO-348: Speed-up plans synchronization between user and microservice
  - AWP-484: Remove sending CDN limit letter and notice functionality
  - XRAY-800: Handle CDN original url was passed in wrong format
  - XRAY-799: Change type of property is_premium for CDN
  - XRAY-733: Added ea-php82/alt-php82 support
  - XRAY-804: Update CDN description to: Content Delivery Network


author: Martin Krcho <mkrcho@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 0.5-20
changelog:
  - AWP-602: Only hide ObjectCache PRO advertising if dedicated constant exists
  - XRAY-809: Improved statistics collection of blocking resources


author:
  Martin Krcho <mkrcho@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com>, Dmitriy Leonov <dmleonov@cloudlinux.com> - 0.5-20

changelog:
  - AWP-602: Only hide ObjectCache PRO advertising if dedicated constant exists
  - XRAY-809: Improved statistics collection of blocking resources


author: Dmitriy Leonov <dmleonov@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> - 0.5-21
changelog:
  - XRAY-814: Send collected WebVitals metrics to the ClickHouse
  - XRAY-811: Provide opportunity to obtain task id by x-ray extension
  - XRAY-812: Add possibility to get real tracing task id from x-ray extension
  - XRAY-813: Pass tracing task id from PHP to Javascript app
  - AWP-658: Injecting perfume.js in PHP X-Ray profiler
  - XRAY-818: Collect only needed WebVitals metrics


author:
  Dmitriy Leonov <dmleonov@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 0.5-21

changelog:
  - XRAY-814: Send collected WebVitals metrics to the ClickHouse
  - XRAY-811: Provide opportunity to obtain task id by x-ray extension
  - XRAY-812: Add possibility to get real tracing task id from x-ray extension
  - XRAY-813: Pass tracing task id from PHP to Javascript app
  - AWP-658: Injecting perfume.js in PHP X-Ray profiler
  - XRAY-818: Collect only needed WebVitals metrics


author: Timur Kalimullin <tkalimullin@cloudlinux.com>, Dmitriy Leonov <dmleonov@cloudlinux.com> - 0.5-22
changelog:
  - XRAY-819: Avoid sending empty plugin information in shortcodes
  - XRAY-826: Change WebVitals endpoint to existing alias xray.cloudlinux.com


author:
  Timur Kalimullin <tkalimullin@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, Martin Krcho <mkrcho@cloudlinux.com> - 0.5-23

changelog:
  - XRAY-825: Add request_id field to WebVitals metrics package
  - CLPRO-408: Implement ability to hide specific feature
  - CLPRO-558: Improve the collection of WebVitals statistics
  - AWP-821: Add release version to Sentry events


author:
[cell repeats an earlier one in this file: 132 characters]

changelog:
  - XRAY-814: Send collected advanced metrics to the ClickHouse
  - XRAY-811: Provide opportunity to obtain task id by x-ray extension
  - XRAY-812: Add possibility to get real tracing task id from x-ray extension
  - XRAY-813: Pass tracing task id from PHP to Javascript app
  - AWP-658: Injecting perfume.js in PHP X-Ray profiler
  - XRAY-818: Collect only needed advanced metrics


author: Timur Kalimullin <tkalimullin@cloudlinux.com>, Dmitriy Leonov <dmleonov@cloudlinux.com> - 0.5-22
changelog:
  - XRAY-819: Avoid sending empty plugin information in shortcodes
  - XRAY-826: Change advanced metrics endpoint to existing alias xray.cloudlinux.com


author:
[cell repeats an earlier one in this file: 128 characters]

changelog:
  - XRAY-825: Add request_id field to advanced metrics package
  - CLPRO-408: Implement ability to hide specific feature
  - CLPRO-558: Improve the collection of advanced metrics
  - AWP-821: Add release version to Sentry events


author: Martin Krcho <mkrcho@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 0.5-27
changelog:
  - Improve sentry events (CLPRO-654, CLPRO-651)
  - Added CLI to activate advanced metrics (CLPRO-1080)


author:
  Sergey Kokhan <skokhan@cloudlinux.com> Alexandr Demeshko <ademeshko@cloudlinux.com> Daria Kavchuk <dkavchuk@cloudlinux.com> - 0.1-1

changelog:
  - MODLS-732: Elastic-XRAY funcionality separated
  - MODLS-709: Added XRAY agent with distributed tracing support
  - MODLS-707: Made xray agent work asynchronously
  - MODLS-701: Added python XRAY agent
  - MODLS-678: Initial version of alt-php-xray


author:
  Sergey Kokhan <skokhan@cloudlinux.com> Alexandr Demeshko <ademeshko@cloudlinux.com> Daria Kavchuk <dkavchuk@cloudlinux.com> - 0.1-2

changelog:
  - MODLS-784: Added request_count and initial_count support
  - MODLS-787: Support jwt token added
  - MODLS-768: Support fpm added
  - MODLS-772: X-Ray agent reworked as service
  - MODLS-774: Added has_error flag and wp-plugin for mysql queries
  - MODLS-776: connect to service added
  - MODLS-773: mysql queries aggregated
  - MODLS-769: default values added
  - MODLS-771: time limits increased up to 48h
  - MODLS-762: Add possibility to get backtrace for function
  - MODLS-775: Fix JSONDecodeErrorjson.decoder in raw_decode
  - MODLS-770: Support CageFS added
  - MODLS-767: duplicated URLs filtering
  - MODLS-766: logging added
  - MODLS-765: ea-php support added
  - MODLS-764: X-Ray agent: process request_qty
  - MODLS-748: Write data to cloudlinux-xray-agent
  - MODLS-761: Added slow functions info gathering
  - MODLS-763: X-Ray agent send
  - MODLS-750: xray.tasks directive with fnmatch template added
  - MODLS-758: Added wordpress plugin time tracing, request data collection reworked
  - MODLS-759: API integration
  - MODLS-751, MODLS-752, MODLS-753, MODLS-755, MODLS-754: manager implemented
  - MODLS-743: Add possibility to hook file and line of called function
  - MODLS-711: Added hooks for mysql related functions


author:
  Sergey Kokhan <skokhan@cloudlinux.com> Alexandr Demeshko <ademeshko@cloudlinux.com> Daria Kavchuk <dkavchuk@cloudlinux.com> - 0.1-3

changelog:
  - XRAY-34: Added support Plesk for X-Ray manager
  - XRAY-30: Added support Plesk php versions for X-Ray extension
  - XRAY-1: Fixed MySQL queries parser
  - XRAY-66: Fix issue when null result from API causes agent to restart
  - XRAY-65: Added 'ignore' handler for reading data from socket


author: Alexandr Demeshko <ademeshko@cloudlinux.com> Daria Kavchuk <dkavchuk@cloudlinux.com> - 0.1-4
changelog:
  - XRAY-71: run directory mode changed
  - XRAY-69: logrotate config added
  - XRAY-68: cPanel alias resolving added
  - XRAY-48: DirectAdmin support added


author:
  Sergey Kokhan <skokhan@cloudlinux.com> Alexandr Demeshko <ademeshko@cloudlinux.com> Daria Kavchuk <dkavchuk@cloudlinux.com> - 0.1-7

changelog:
  - XRAY-25: X-Ray processing moved to child
  - XRAY-72: sentry improvements
  - XRAY-75: system_id shift reconfiguration
  - XRAY-76: MySQL queries truncated to 512 bytes
  - XRAY-67: reset criu images to apply xray.ini changes


author: Daria Kavchuk <dkavchuk@cloudlinux.com> - 0.1-9
changelog:
  - XRAY-96: retrying all requests to API up to 3 attempts
  - XRAY-86, XRAY-87: fix bugs, discovered by tests
  - XRAY-64: resolve sites given with www. prefix


author: Daria Kavchuk <dkavchuk@cloudlinux.com> Sergey Kokhan <skokhan@cloudlinux.com> - 0.2-2
changelog:
  - XRAY-124: DirectAdmin domain aliases added
  - XRAY-128: Fixed tracing taskid resolving
  - Enhancements for subprocess calls


author: Daria Kavchuk <dkavchuk@cloudlinux.com> Alexandr Demeshko <ademeshko@cloudlinux.com> - 0.2-3
changelog:
  - XRAY-147: fix for alternative format of DA pointer files
  - XRAY-136: process errors during API calls
  - XRAY-142: json escaping optimised
  - XRAY-141: logging reconfigured
  - XRAY-140: fix DA options resolving
  - XRAY-134: read DA config files in proper encoding
  - XRAY-132: fix resolving version in case of FPM (cPanel)


author: Daria Kavchuk <dkavchuk@cloudlinux.com> - 0.3-1
changelog:
  - XRAY-158: X-RAY-63 Sentry issue fixed (AttributeError: 'NoneType' object has no attribute 'task_id')
  - XRAY-160: number of running tasks restriction
  - XRAY-154: xray-user-agent management commands added
  - XRAY-155: update url with scheme if it is missing
  - XRAY-156: added jwt token check before manager init
  - XRAY-146: cli API added
  - XRAY-145: X-Ray User Manager


author:
[cell repeats an earlier one in this file: 130 characters]

changelog:
  - XRAY-635: Make X-Ray work inside container
  - XRAY-637: Fix accidental losing of requests and request counters
  - XRAY-632: Add processing of shortcode callback declared via __call magic method
  - XRAY-633: Improving object export to Sentry events in X-Ray PHP profiler
  - XRAY-634: Add newline to xray-tasks cron


author: Dmitriy Leonov <dmleonov@cloudlinux.com> - 0.5-28
changelog:
  - Avoid 500 error when /opt/alt/php-xray restricted to access from PHP in WP SmartAdvice (CLPRO-579)


author:
  Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com>, Dmitriy Leonov <dmleonov@cloudlinux.com> - 0.6-2

changelog:
  - Don't scan user websites when AWP is turned off (CLPRO-1227)
  - Added alt-php83 support (CLPRO-1163)
  - Added support for php 5.4, 5.5 for php profiler (CLPRO-1246)
  - Send Sentry event when mail or analytics sending failed (CLPRO-1245, CLPRO-1180)


changelog: - Implemented SmartAdvice reminders (CLPRO-1184, CLPRO-1188, CLPRO-1191, CLPRO-1304)
author:
  Dmitriy Leonov <dmleonov@cloudlinux.com>, Martin Krcho <mkrcho@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 0.6-3


author: Martin Krcho <mkrcho@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> - 0.6-5
changelog:
  - Added support for variable advice driven texts in the UI and email (CLPRO-1156)
  - Improve open_basedir setting handling on Plesk (CLPRO-1347)
  - Add fuzziness to execution time of the wordpress-plugin-install cron job (CLPRO-1328)


author: Martin Krcho <mkrcho@cloudlinux.com>, Dmitriy Leonov <dmleonov@cloudlinux.com> - 0.6-6
changelog:
  - Add stack trace to Sentry events in SmartAdvice WP plugin (CLPRO-1267)
  - Remove CL logo from SmartAdvice email footer (CLPRO-1375)


author:
  Dmitriy Leonov <dmleonov@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com>, Martin Krcho <mkrcho@cloudlinux.com> - 0.6-9

changelog:
  - Adding environment variable to the Sentry events (CLPRO-1317)
  - Extend advice data fields with variants in cl-smart-advice utilities (CLPRO-1155)
  - Adapt Smart Advice plugin to support DireactAdmin (CLPRO-1405)
  - Add tracking of purchase related events (CLPRO-1159)
  - Track failure to report to analytics API from JS to Sentry (CLPRO-1354)


author: Martin Krcho <mkrcho@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 0.6-10
changelog:
  - Improve logging for notification status checks and advice filtering (CLPRO-1449)
  - Displaying text variant for advice in the plugin (CLPRO-1471)
  - Avoid downtime when autocomplete tasks cron executed (CLPRO-1408)
  - Add details to SmartAdvice plugin installation errors (CLPRO-1479, CLPRO-1506)


author:
  Martin Krcho <mkrcho@cloudlinux.com>, Dmitriy Leonov <dmleonov@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> - 0.6-11

changelog:
  - Add optional toggle making X-Ray to automatically enable extension for all php versions (CLPRO-587)
  - Add auto-fixing for incorrect open_basedir setting values for Plesk (CLPRO-1480)
  - Cover Wordpress Admin notices (SmartAdvice) with telemetry (CLPRO-1510)


author: Dmitriy Leonov <dmleonov@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> - 0.6-12
changelog:
  - Added response status code to the analytics call (CLPRO-1473)
  - Update incompatibilities list for existing advices (CLPRO-1544)


author:
  Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Dmitriy Leonov <dmleonov@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 0.6-13

changelog:
  - Fix advice sync with Wordpress plugin (CLPRO-1549, CLPRO-1572)
  - Add new two events (advice_synced, advice_sync_failed) to the analytics (CLPRO-1545)
  - Rewrite run.sh script logic to the Python (CLPRO-1554)
  - Reminder emails will never be sent with cached smart advice data (CLPRO-1546)


author: Timur Kalimullin <tkalimullin@cloudlinux.com>, Dmitriy Leonov <dmleonov@cloudlinux.com> - 0.6-15
changelog:
  - Added support for MyImunify Account protection advice (CLPRO-1489, CLPRO-1641)
  - Fixed E_NOTICE error in SmartAdvice plugin (CLPRO-1605)
  - Fixed error checking advice for the site in the SmartAdvice plugin (CLPRO-1606)
  - Fix checking advice_id variable (CLPRO-1622)


author:
  alutsiuk <alutsiuk@cloudlinux.com>, Dmitriy Leonov <dmleonov@cloudlinux.com>, Martin Krcho <mkrcho@cloudlinux.com> - 0.6-16

changelog:
  - Add ability to sync multiple users with microservice (CLPRO-1608)
  - Improve WP SmartAdvice installing and advice sync processes (CLPRO-1638)
  - Avoid problem with creating symlink to plugin file during installation of Smart Advice WP plugin (CLPRO-1637)


author:
  Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, Martin Krcho <mkrcho@cloudlinux.com> - 0.6-17

changelog:
  - Add alternative way of retriving php version through phpinfo (CLPRO-1574)
  - Replace edition specific check with universal cpapi feature supported (CLPRO-1531)
  - Use package version for WordPress plugins (CLPRO-1602)
  - Limit number of simultaneously running threads in XRay agent (CLPRO-1634)


author:
  Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Martin Krcho <mkrcho@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> - 0.6-18

changelog:
  - Improve quality and usefulness of sentry reports (CLPRO-1516, CLPRO-1669)
  - Improve Sentry logging of analytics sending failures (CLPRO-1516)
  - Increase string length parameter during Sentry init (CLPRO-1578)
  - Fix disk quota exceeded on installing Smart Advice Plugin (CLPRO-1665)


author:
  alutsiuk <alutsiuk@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 0.6-19

changelog:
  - Update website incompatibilities when AWP daemon is not running (CLPRO-1689)
  - Unify enabling End-User X-ray plugin across all editions (CLPRO-1657)
  - Extend analytics report for tracking upgrade url usage (CLPRO-1738, CLPRO-1769)


author: Dmitriy Leonov <dmleonov@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 0.6-20
changelog:
  - Give WordPress plugin info and upload the zip archive to the site temp folder (CLPRO-1492)
  - Improve the analysis of errors in applying advice (CLPRO-713, CLPRO-1786)


author: Timur Kalimullin <tkalimullin@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> - 0.6-21
changelog:
  - Improve error handling in the SmartAdvice plugin (CLPRO-1816)
  - Bypass open_basedir restriction in WP SmartAdvice (CLPRO-1777)
  - Fix xray-continuous cron sends emails on errors (CLPRO-1871)


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com - 0.6-22
changelog:
  - Install Smart Advice WordPress plugin only if allowed by administrator (CLPRO-1924)
  - Added wordpress-plugin-uninstall which removes all installed Smart Advice plugins (CLPRO-1926)


author: alutsiuk <alutsiuk@cloudlinux.com>, Vladimir Lebedev <vlebedev@cloudlinux.com> - 0.6-24
changelog:
  - Add support of translations in XRAY (CLPRO-1858)
  - Fixed php version detection in cPanel when selector is enabled (CLPRO-1457)


author: alutsiuk <alutsiuk@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 0.6-25
changelog:
  - Adding Imunify advice to the SmartAdvice plugin (CLPRO-2106, CLPRO-2107, CLPRO-2130, CLPRO-2108, CLPRO-1962, CLPRO-2157, CLPRO-2142)
  - Filter out advices for non-exist WordPress sites (CLPRO-2129)


author: Timur Kalimullin <tkalimullin@cloudlinux.com>, Roman Krompets <rkrompets@cloudlinux.com> - 0.6-27
changelog:
  - Fixed an error on DirectAdmin "Unable to load dynamic library 'clos_ssa.so'" (CLPRO-1409)
  - Fix the display of the argument for CDN in the SmartAdvice plugin (CLPRO-2196)


author:
  alutsiuk <alutsiuk@cloudlinux.com>, Denis Komandyr <dkomandyr@cloudlinux.com>, Timur Kalimullin <tkalimullin@cloudlinux.com> - 0.6-28

changelog:
  - Fix SmartAdvice plugin installation when AccelerateWP is not active (CLPRO-2269)
  - Fix user count tracking in Sentry events (CLPRO-2238)
  - Improved SmartAdvice plugin update (CLPRO-2300)


author: Denis Komandyr <dkomandyr@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> - 0.6-29
changelog:
  - Added alt-php84 support (CLPRO-2398)
  - Fix getting advice list if there is advice for non-existing domain (CLPRO-2207)


author: Roman Krompets <rkrompets@cloudlinux.com> - 0.6-33
changelog:
  - Implement automatically creation of missed /usr/share/alt-php-xray-tasks/UID directories for all users (CLPRO-2491)
  - Fixed creation of wrong cron files (CLPRO-2622)


author: Roman Krompets <rkrompets@cloudlinux.com> - 0.6-34
changelog:
  - Removed accelerate-wp from dependencies of alt-php-xray (CLPRO-2201)
  - Fix saving tracing task url with comma (CLPRO-1796)


author: Roman Krompets <rkrompets@cloudlinux.com>, Ruslan Koliada <rkoliada@cloudlinux.com> - 0.6-35
changelog:
  - Domain with "www" prefix not recognized because "www" part is removed from its name that result in error (CLPRO-2752)
  - Optimization of the cl-smart-advice utility (CLPRO-2740)


author: Roman Krompets <rkrompets@cloudlinux.com> - 0.6-36
changelog:
  - Fixed issue when X-Ray is recognizing JTL-Shop or Shopware (eCommerce platforms) as WordPress sites (CLPRO-2154)


author: Roman Krompets <rkrompets@cloudlinux.com> - 0.6-41
changelog:
  - Added PHP 8.5 support for X-Ray (CLPRO-2916)
  - Part 2 of fix processes killed due to the xray.so module issue (CLPRO-2844)
  - Fix conflicts between X-Ray and Slow Site Analyzer modules on PHP85 (CLPRO-2929)


author: Roman Krompets <rkrompets@cloudlinux.com> - 0.6-46
changelog:
  - CLPRO-3015, CLPRO-3023: Security fixes for X-Ray
  - CLPRO-3055: Enable ea-php xray.so builds for CloudLinux 10


author: Roman Krompets <rkrompets@cloudlinux.com> - 0.6-46
changelog:
  - CLPRO-3015, CLPRO-3023: Improved Smart Advice operations, helper scripts, and local service communication
  - CLPRO-3055: Enable ea-php xray.so builds for CloudLinux 10


author: Roman Krompets <rkrompets@cloudlinux.com> - 0.6-47
changelog:
  - CLPRO-3049, CLPRO-3059: Improved PHP configuration handling, analytics processing, and local service communication


author: Roman Krompets <rkrompets@cloudlinux.com> - 0.6-48
changelog:
  - CLPRO-3079: Improved Smart Advice operations, trace data processing, and local service communication


author: Ruslan Koliada <rkoliada@cloudlinux.com> - 0.6-49
changelog:
  - CLPRO-3145: Improved trace data export, tracing task and PHP profiler data processing, and Smart Advice operations
  - CLPRO-3144: Implementation improvements and internal maintenance updates
  - CLPRO-3143: Improved Smart Advice operations and runtime configuration handling


author: Ruslan Koliada <rkoliada@cloudlinux.com> - 0.6-51
changelog:
  - CLPRO-3205: Improved telemetry data handling, trace data processing, PHP configuration handling, and local service reliability
  - CLPRO-2672: Stopped spurious PHP profiler callback errors in domain logs when the profiler helper is unavailable, and added an open_basedir recommendation for full optimization data collection
  - CLPRO-3240: Improved Smart Advice operations, telemetry and trace data handling, and local service reliability
  - CLPRO-3258: Improve X-Ray request list filtering and grouped request stats


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 4.4.9-107
changelog:
  - Fixed bug #79330: shell_exec() silently truncates after a null byte
  - Fixed bug #79465: OOB Read in urldecode() (CVE-2020-7067)


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 4.4.9-109
changelog:
  - Fixed bug #78875: Long variables cause OOM and temp files are not cleaned (CVE-2019-11048)
  - Fixed bug #78876: Long variables in multipart/form-data cause OOM and temp files are not cleaned (CVE-2019-11048)


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 4.4.9-113
changelog:
  - Fix bug #79699: PHP parses encoded cookie names so malicious `__Host-` cookies can be sent (CVE-2020-7070)


author: Eugene Zamriy <ezamriy@cloudlinux.com> - 1-6.1
changelog:
  - added install trigger for cl-MySQL50-client, cl-MySQL51-client,
    cl-MySQL55-client, cl-MySQL56-client


author: Eugene Zamriy <ezamriy@cloudlinux.com> - 1-6.2
changelog:
  - added install trigger for cl-MySQL50-shared, cl-MySQL51-shared,
    cl-MySQL55-shared, cl-MySQL56-shared


author: Eugene Zamriy <ezamriy@cloudlinux.com> - 1-6.4
changelog:
  - ALTPHP-189: call alt-php-mysql-reconfigure.py instead of deprecated
    alt-php-mysql-reconfigure in posttrans section
  - add alt-php70-mysql5.7 and alt-php70-mariadb101 requirements


author: Darya Malyavkina <dmalyavkina@cloudlinux.com> - 5.1.6-139
changelog:
  - MODLS-741: Make LSCRIU log messages with timestamps
  - MODLS-804: Improve mod_lsapi & lsphp error reporting in case of php memory limit reached
  - ALTPHP-961: Update litespeed to 7.7 version


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 5.1.6-140
changelog:
  - Fix bug #74267: segfault with streams and invalid data
  - Fix bug #79787: mb_strimwidth does not trim string
  - Fix bug #79877: getimagesize function silently truncates after a null byte


author: Eduard Abdullin <eabdullin@cloudlinux.com> - 5.1.6-147
changelog:
  - ALTPHP-1053: Update move_override_ini patch
  - ALTPHP-1038: Update litespeed log patch
  - ALTPHP-1082: Add alt-php-pdo requires for alt-php-firebird


author: Nikita Ivanov <nivanov@cloudlinux.com> - 5.1.6-161
changelog:
  - Fix for hardened PHP
  - CVE-2023-0568: Fix array overrun when appending slash to paths
  - CVE-2023-0662: Fix DOS vulnerabality by limiting number of parsed
    multipart body parts and printing upload limit exceed error message only once


author: Nikita Ivanov <nivanov@cloudlinux.com> - 5.1.6-163
changelog:
  - Fix for hardened PHP
  - CVE-2023-3823: Fix external entity loading in XML without enabling by
    sanitizing libxml2 globals before parsing


author: Dmitriy Popov <dpopov@cloudlinux.com> - 5.1.6-169
changelog:
  - Fix for hardened PHP
  - CVE-2022-31629: use stack instead of heap, check correct one var
  - CVE-2024-2756: fix __Host-/__Secure-cookie bypass due to partial
    CVE-2022-31629 fix


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 5.1.6-171
changelog:
  - Security fixes
  - CVE-2024-8927: Fix bypass of cgi.force_redirect configuration
  - CVE-2024-8925: Fix data integrity violation while parsing multipart/form-data
    boundaries larger than the read buffer


author: Eduard Chiganov <echiganov@cloudlinux.com> - 5.1.6-32
changelog:
  - ALTPHP-1719: Remove deprecated sql bindings:
  - mysql50, mysql51, mysql55, mariadb55, mariadb100, mariadb101, percona55, percona56.


author: Sergey Fokin <sfokin@cloudlinux.com> - 3-11
changelog:
  - add mysqlnd dependency for pdo_mysql for alt-php83
  - replace and backup ini with new if it was changed
  - rebuild alt-php.ini in posttrans section for alt-php >= 83


author: Eduard Chiganov <echiganov@cloudlinux.com> - 3-12
changelog:
  - ALTPHP-1719: Remove deprecated sql bindings:
  - mysql51, mysql55, mariadb55, mariadb100, mariadb101, percona55, percona56.


author: Remi Collet <Fedora@FamilleCollet.com> 1:1.9.2-1
changelog:
  - update to 1.9.2 (bug + security fix)
  http://pear.php.net/advisory-20110228.txt
  - update Console_Getopt to 1.3.0
  - don't require php-devel (#657812)
  - update install-pear.php


author: Remi Collet <Fedora@FamilleCollet.com> 1:1.9.2-3
changelog:
  - move %{pear_docdir} to %{_docdir}/pear
  https://fedorahosted.org/fpc/ticket/69
  - update Console_Getopt to 1.3.1 (no change)


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-3
changelog:
  - extension Auth_SASL updated from 1.0.6 to 1.1.0
  - extension Mail updated from 1.2.0 to 1.4.1
  - extension Mail_Mime updated from 1.8.9 to 1.10.1
  - extension Net_SMTP updated from 1.6.2 to 1.8.0
  - extension Mail_mimeDecode updated from 1.5.5 to 1.5.6
  - extension Net_Socket updated from 1.0.24 to 1.2.2
  - extension Net_Sieve 1.4.1 added


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1-10
changelog:
  - move sources for all alt-php to single git project
  - extension File_MARC 1.2.0 added
  - extension Structures_LinkedList 0.2.2 added


author: Sergey Fokin <sfokin@cloudlinux.com> 1-12
changelog:
  - update File_MARC to 1.3.0
  - update Mail_Mime to 1.10.2
  - update Net_IDNA2 to 0.2.0
  - update Net_SMTP to 1.8.1
  - update Net_Sieve to 1.4.4


author: Anatholy Scryabin <ascryabin@cloudlinux.com> 1-13
changelog:
  - update File_MARC to 1.4.1
  - update Mail_Mime to 1.10.11
  - update Net_SMTP to 1.10.0
  - update Net_Sieve to 1.4.5


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-45
changelog:
  - Moved igbinary to separate package
  - Moved memcache to separate package
  - Moved redis to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-47
changelog:
  - Moved timezonedb to separate package
  - Moved imagick to separate package
  - Added dependency to new xdebug extension in separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-51
changelog:
  - ALTPHP-1946: Moved bitset to separate package
  - ALTPHP-1948: Moved geoip to separate package
  - ALTPHP-1950: Moved inotify to separate package


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 5.2.17-171
changelog:
  - Fix bug #70362: Can't copy() large 'data://' with open_basedir
  - Fix bug #73527: Invalid memory access in php_filter_strip
  - Fix bug #74267: segfault with streams and invalid data
  - Fix bug #79787: mb_strimwidth does not trim string
  - Fix bug #79877: getimagesize function silently truncates after a null byte


author: Daniil Leonov <dleonov@cloudlinux.com> - 5.2.17-175
changelog:
  - Fix bug #73809: Phar Zip parse crash - mmap fail
  - Fix bug #80366: Potential issue in ext/standard/iptc.c: Return Value Not Checked


author: Eduard Abdullin <eabdullin@cloudlinux.com> - 5.2.17-178
changelog:
  - ALTPHP-1053: Update move_override_ini patch
  - ALTPHP-1038: Update litespeed log patch
  - ALTPHP-1082: Add alt-php-pdo requires for alt-php-firebird and alt-php-sqlite


author: Eduard Abdullin <eabdullin@cloudlinux.com> - 5.2.17-182
changelog:
  - ALTPHP-1164: Update hardened php
  - ALTPHP-1154: Fix libxml requires
  - ALTPHP-1156: Get rid of manipulations with enabling extensions (mysqli.so) in default.ini


author: Nikita Ivanov <nivanov@cloudlinux.com> - 5.2.17-188
changelog:
  - Fix for Harden PHP
  - CVE-2021-21704: fix errors in pdo_firebird extension
  - CVE-2021-21705: add user name and password validation in filters module


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 5.2.17-189
changelog:
  - Fix for harden PHP
  - CVE-2022-31628: Fix potential infinite recursion in phar wrapper when using quine gzip file
  - CVE-2022-31629: Add cookie integrity validation


author: Dmitriy Popov <dpopov@cloudlinux.com> - 5.2.17-198
changelog:
  - Fix for hardened PHP
  - CVE-2024-2756: fix __Host-/__Secure-cookie bypass due to partial
    CVE-2022-31629 fix


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 5.2.17-203
changelog:
  - Security fixes
  - CVE-2024-11236: prevent integer overflow in quoters causing OOB writes
  - CVE-2024-11234: fix HTTP fulluri CRLF injection
  - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode
    filter


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 5.2.17-206
changelog:
  - Security fixes
  - CVE-2018-19935: fix null pointer dereference in imap_mail
  - CVE-2018-14883: fix int overflow leading to heap-based buffer over-read in
    exif.c
  - CVE-2018-20783: fix a buffer over-read in PHAR reading functions


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 5.2.17-207
changelog:
  - Security fixes
  - CVE-2018-17082: fix cross-site scripting in apache2handler sapi
  - CVE-2018-19518: disable rsh/ssh functionality in imap to prevent argument
    injection


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 5.2.17-208
changelog:
  - Security fixes
  - CVE-2019-11034: fix possible infoleak or crush caused by read past allocated
    buffer in exif_process_IFD_TAG()
  - CVE-2019-9025: fix possible memcpy() execution with negative argument in
    mb_split()


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 5.2.17-210
changelog:
  - Security fixes
  - CVE-2019-11035: fix potential infoleak or crash via read past allocated buffer
    in exif_iif_add_value()
  - CVE-2019-11036: fix infoleak of crash via read past allocated buffer in
    exif_process_IFD_TAG()


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 5.2.17-211
changelog:
  - Security fixes
  - CVE-2019-9022: fix DNS response parsing
  - CVE-2019-9023: complete fix heap-based buffer over-read in mbstring regular
    expression functions when supplied with invalid multibyte data


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 5.2.17-212
changelog:
  - Security fixes
  - CVE-2025-1217: http stream wrapper: fix handling folded headers
  - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon
  - CVE-2025-1861: fix http redirect location truncation
  - CVE-2020-7071: avoid parse_url() returning a wrong host to user


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 5.2.17-214
changelog:
  - Security fixes
  - CVE-2025-1220: fix null byte termination in hostnames
  - CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
    XML namespace prefix


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 5.2.17-215
changelog:
  - Security fixes
  - CVE-2019-19246: fix heap-based buffer over-read in str_lower_case_match in
    regexec.c


author: Juan Carlos Garcia <jgarcia@cloudlinux.com> - 5.2.17-221
changelog:
  - CVE-2026-6722: soap extension use-after-free via apache:Map duplicate keys
    (5.2 backport applies addref half only; ref_map ZVAL_PTR_DTOR is
    intentionally omitted because ref_map is heterogeneous in 5.x and the
    dtor would corrupt the xmlNodePtr entries — see patch header)
  - CVE-2026-7262: soap extension NULL pointer deref via apache:Map missing value
  - CVE-2026-7261: soap extension use-after-free with SOAP_PERSISTENCE_SESSION header parsing failure


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 5.2.17-223
changelog:
  - ELS-2362: build litespeed SAPI with devtoolset-7 on CL6 (lsapi uses C11 __atomic builtins requiring gcc >= 4.7)


author: Eduard Chiganov <echiganov@cloudlinux.com> - 5.2.17-39
changelog:
  - ALTPHP-1719: Remove deprecated sql bindings:
  - mysql50, mysql51, mysql55, mariadb55, mariadb100, mariadb101, percona55, percona56.
  - ALTPHP-1769: Build for RHEL 9.


author: Tim Jackson <rpm@timj.co.uk> - 3.0.19-1
changelog:
  - Update to 3.0.19
  - Fix PHP Zend API/ABI dependencies to work on EL-4/5
  - Fix "License" tag
  - Fix encoding of "NOTICE" file
  - Add registration via PECL


author: Remi Collet <Fedora@FamilleCollet.com> - 3.1.3p1-1
changelog:
  - update to 3.1.3 patch1 (beta, for PHP 5.3 support)
  - add test suite (disabled for http://pecl.php.net/bugs/bug.php?id=16793)
  - add use_request_time, lazy_classes, lazy_functions options (apc.ini)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.1.9-1
changelog:
  - update to 3.1.9 (bugfix, stable) (#662655)
  - create -devel subpackage with header files
  - ship apc.php for easier referral in the config files


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-121
changelog:
  - Updated gnupg to 1.5.1
  - Updated uploadprogress to 1.1.4
  - Updated rar to 4.2.0
  - ALTPHP-1509: alt-ImageMagick is linked statically now


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-123
changelog:
  - Moved igbinary to separate package
  - Moved memcache to separate package
  - Moved memcached to separate package
  - Moved geos to separate package
  - Moved redis to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-129
changelog:
  - ALTPHP-1788: Moved http to separate package
  - ALTPHP-1790: Moved msgpack to separate package
  - ALTPHP-1796: CL9 support


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-131
changelog:
  - ALTPHP-1825: Moved gnupg to separate package
  - ALTPHP-1827: Moved stats to separate package
  - ALTPHP-1828: Moved pdflib to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-132
changelog:
  - ALTPHP-1935: Moved xhprof to separate package
  - ALTPHP-1946: Moved bitset to separate package
  - ALTPHP-1948: Moved geoip to separate package
  - ALTPHP-1949: Moved htscanner to separate package
  - ALTPHP-1950: Moved inotify to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-134
changelog:
  - ALTPHP-1960: Moved ssh2 to separate package
  - ALTPHP-1954: Moved lzf to separate package
  - ALTPHP-1955: Moved mailparse to separate package
  - ALTPHP-1962: Moved yaf to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-135
changelog:
  - ALTPHP-2013: Moved APC, ares, bcompiler, bloomy, big_int, bz2_filter, coin_acceptor to separate packages; add runtime requires


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-137
changelog:
  - ALTPHP-2016: Moved out extensions: SPL_Types, mongo, quickhash, radius, rsync, stem, stomp, translit, xrange, zendopcache


author: Eduard Chiganov <echiganov@cloudlinux.com> 2.1.0-1
changelog:
  - ALTPHP-1654: Newer version of memcached for alt-php 74-82.
  - EA4D-454: Create alt-phpXX-pecl-memcached.


author: CloudLinux Packaging Team <packager@cloudlinux.com> - 2.2.8-11
changelog:
  - ALTPHP-2283: Fix test crash from missing require_once files; fix testObject for Redis 7+ listpack.
  - ALTPHP-2283: Add PHP 5.2 early-exit to avoid running tests requiring 5.3+ features.


author: Nikolai Mikhno <nmikhno@cloudlinux.com> - 5.3.29-135
changelog:
  - Fix bug #79699: PHP parses encoded cookie names so malicious `__Host-` cookies can be sent (CVE-2020-7070)
  - Fix bug #80007: Potential type confusion in unixtojd() parameter parsing


author: Eduard Abdullin <eabdullin@cloudlinux.com> - 5.3.29-141
changelog:
  - ALTPHP-1053: Update move_override_ini patch
  - ALTPHP-1038: Update litespeed log patch
  - ALTPHP-1082: Add alt-php-pdo requires for alt-php-sqlite, alt-php-mysqlnd and alt-php-firebird


author: Nikita Ivanov <nivanov@cloudlinux.com> - 5.3.29-152
changelog:
  - CVE-2021-21703: fix error in php fpm shared memory organization leading to privilage escalation
  - CVE-2021-21707: fix handling of paths with percent encoded NULL byte


author: Sergey Fokin <sfokin@cloudlinux.com> - 5.3.29-167
changelog:
  - ALTPHP-953: restart lsphp when update its binary
  - ALTPHP-1573: update LiteSpeed to 8.1
  - ALTPHP-1665: pack fpm as sub-package
  - ALTPHP-1713: add ext/curl/php_curl.h to devel sub-package


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 5.3.29-173
changelog:
  - Security fixes
  - CVE-2024-8925: Fix data integrity violation while parsing multipart/form-data
    boundaries larger than the read buffer
  - CVE-2024-8927: Fix bypass of cgi.force_redirect configuration


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 5.3.29-175
changelog:
  - Security fixes
  - CVE-2024-11234: fix HTTP fulluri CRLF injection
  - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode
    filter
  - CVE-2024-11236: prevent integer overflow in quoters causing OOB writes


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 5.3.29-178
changelog:
  - Security fixes
  - CVE-2020-7068: fix using of freed hash key in the phar_parse_zipfile function
  - CVE-2020-7071: avoid parse_url() returning a wrong host to user


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 5.3.29-179
changelog:
  - Security fixes
  - CVE-2018-20783: fix a buffer over-read in PHAR reading functions
  - CVE-2018-19935: fix null pointer dereference in imap_mail
  - CVE-2018-14883: fix int overflow leading to heap-based buffer over-read in
    exif.c


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 5.3.29-185
changelog:
  - Security fixes
  - CVE-2025-1217: http stream wrapper: fix handling folded headers
  - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon
  - CVE-2025-1861: fix http redirect location truncation


author: Eduard Chiganov <echiganov@cloudlinux.com> - 5.3.29-186
changelog:
  - ALTPHP-2049: Change method of creating php_handlers for plesk.
  - ALTPHP-2060: Rename alt-phpXY-fpm to alt-phpXY-php-fpm.


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 5.3.29-189
changelog:
  - ALTPHP-2341: Update php-fpm lve patch to extract doc_root from php_admin_values
    for CageFS per-domain isolation


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 5.3.29-190
changelog:
  - EA4D-782: Ensure /opt/cpanel/alt-php53/root/usr/var/run/php-fpm path is traversable by all users
    (post-install chmod o+X on path components when dirs were created before package install)


author: Juan Carlos Garcia <jgarcia@cloudlinux.com> - 5.3.29-193
changelog:
  - CVE-2026-6722: soap extension use-after-free via apache:Map duplicate keys
    (5.3 backport applies addref half only; ref_map ZVAL_PTR_DTOR is
    intentionally omitted because ref_map is heterogeneous in 5.x and the
    dtor would corrupt the xmlNodePtr entries — see patch header)
  - CVE-2026-7262: soap extension NULL pointer deref via apache:Map missing value
  - CVE-2026-7261: soap extension use-after-free with SOAP_PERSISTENCE_SESSION header parsing failure
  - CVE-2026-6735: php-fpm status endpoint XSS via unescaped request_uri and query_string
    (5.3 backport applies HTML entity escape to both HTML and JSON /status
    endpoints since php_json_encode_string() isn't exported on 5.x — JSON
    consumers will see HTML entities in request_uri/query_string fields)


author: Juan Carlos Garcia <jgarcia@cloudlinux.com> - 5.3.29-201
changelog:
  - CVE-2015-4604: fileinfo/libmagic out-of-bounds read in mcopy() FILE_SEARCH/FILE_REGEX
    (clamp offset to nbytes; backport of upstream file(1) f938112c)


author: Juan Carlos Garcia <jgarcia@cloudlinux.com> - 5.3.29-203
changelog:
  - CVE-2016-5385: httpoxy - do not trust client-supplied Proxy header exposed as the HTTP_PROXY environment variable


author: Sergey Fokin <sfokin@cloudlinux.com> - 5.3.29-204
changelog:
  - ALTPHP-2485: fix alt-phpXY-fpm failing to start on non-panel hosts. Adopt the same FPM layout as php70+: a global php-fpm.conf that includes php-fpm.d/*.conf plus a default www.conf pool listening on a per-version unix socket (/var/run/alt-phpXY-fpm.sock) instead of the shared 127.0.0.1:9000, so multiple alt-php FPM services no longer collide on the same TCP port and per-domain pools in php-fpm.d still load. On Debian-like distros the pool group is set to nogroup (no nobody group). Drop the now redundant php-fpm.conf.default/.plesk.


author: Matthias Saou <http://freshrpms.net/> 1:0.9.6.1-7
changelog:
  - Add missing tmpwatch requirement (#711236).
  - Stop using macros for simple commands, following recent guidelines changes.


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1:1.9.5-3
changelog:
  - Structures_Graph updated from 1.0.4 to 1.1.1
  - Archive_Tar updated from 1.3.12 to 1.4.0
  - XML_Util updated from 1.2.3 to 1.3.0
  -


author: Shawn Iwinski <shawn.iwinski@gmail.com> 2.1.2-1
changelog:
  - Updated to upstream version 2.1.2
  - PHP minimum version 5.3.3 instead of 5.3.2
  - Added PEAR package.xml modifications
  - Added patch for tests' bootstrap.php
  - Added tests (%check)


author: Dmitry Kasyanov <dkasyanov@cloudlinux.com> 3.7.32-1
changelog:
  - update:
  DbUnit to 1.3.0
  PHP_CodeCoverage to 1.2.16
  phpcpd to 2.0.0
  phploc to 2.0.4
  PHPUnit to 3.7.32
  PHPUnit_Selenium to 1.3.3
  PHPUnit_TestListener_XHProf to 1.0.0
  Text_Template to 1.2.0
  Version to 1.0.2


author: Huseyn Hajizada <hhajizada@cloudlinux.com> 3.1.3-3
changelog:
  - Remove failing eio tests (custom_basic, grp_add, open_error, seek) on CL10 due to floating-point related issues in eio environment


author: Levon Matshkalyan <lmatshkalyan@cloudlinux.com> - 3.1.4-1
changelog:
  - ALTPHP-2492: Update to 3.1.4 version
  - php85-fix.patch dropped (fix absorbed upstream in 3.1.4)
  - Exclude (php53/54/55, platform) combos with no base alt-php runtime
  - Skip kernel-flaky tests on newer platforms: fork.phpt (el10); via debian/rules
    the floating eio-env set (custom_basic/grp_add/open_error/seek) + fork on
    ubuntu24 (kernel 6.8, same set already removed on el10/debian13) and fork on
    debian13; eio_write_variation.phpt on php<=53 deb (PHP 5.4+ syntax). All are
    env/test artifacts, not eio functional regressions.


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-155
changelog:
  - ALTPHP-1752: Moved trader to separate package
  - ALTPHP-1753: Moved eio to separate package
  - ALTPHP-1756: Moved yaz to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-156
changelog:
  - ALTPHP-1778: Moved APM to separate package
  - ALTPHP-1779: Moved weakref to separate package
  - ALTPHP-1780: Moved solr to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-157
changelog:
  - ALTPHP-1786: Moved propro to separate package
  - ALTPHP-1787: Moved raphf to separate package
  - ALTPHP-1788: Moved http to separate package
  - ALTPHP-1789: Moved yaml to separate package
  - ALTPHP-1790: Moved msgpack to separate package
  - ALTPHP-1796: CL9 support


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-158
changelog:
  - ALTPHP-1800: Moved gmagick to separate package
  - ALTPHP-1801: Moved apcu to separate package
  - ALTPHP-1803: Moved oauth to separate package
  - ALTPHP-1804: Moved zmq to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-159
changelog:
  - ALTPHP-1087: Removed non-functional amqp package
  - ALTPHP-1825: Moved gnupg to separate package
  - ALTPHP-1826: Moved dbase to separate package
  - ALTPHP-1827: Moved stats to separate package
  - ALTPHP-1828: Moved pdflib to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-161
changelog:
  - ALTPHP-1935: Moved xhprof to separate package
  - ALTPHP-1946: Moved bitset to separate package
  - ALTPHP-1948: Moved geoip to separate package
  - ALTPHP-1949: Moved htscanner to separate package
  - ALTPHP-1950: Moved inotify to separate package
  - ALTPHP-1951: Moved jsmin to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-162
changelog:
  - ALTPHP-1960: Moved ssh2 to separate package
  - ALTPHP-1954: Moved lzf to separate package
  - ALTPHP-1955: Moved mailparse to separate package
  - ALTPHP-1962: Moved yaf to separate package
  - ALTPHP-2050  Added dependency to new xdiff extension


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-164
changelog:
  - ALTPHP-2014: Moved out extensions: crack, doublemetaphone, functional, haru, hidef, huffman, idn, inclued


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-165
changelog:
  - ALTPHP-2016: Moved out extensions: SPL_Types, libevent, mongo, ncurses, quickhash, radius, rsync, stem, stomp, translit, uri_template, xrange, zendopcache


author: CloudLinux Packaging Team <packager@cloudlinux.com> - 4.3.0-11
changelog:
  - ALTPHP-2283: Fix testObject for Redis 7+ listpack encoding.
  - ALTPHP-2283: Disable broken session tests, add platform-specific guards.


author: Eduard Chiganov <echiganov@cloudlinux.com> - 4.1.6-1
changelog:
  - ALTPHP-1935: Support for tideways_xhprof for alt-php84.
  - ALTPHP-1957: Create alt-phpXX-pecl-xhprof-extension.


author: Nikita Ivanov <nivanov@cloudlinux.com> - 5.4.45-134
changelog:
  - ELS-189: Fix for Harden PHP
  - CVE-2022-31625: Fix freeing of uninitialized memory leading to RCE
  - CVE-2022-31626: Fix buffer overflow in mysqlnd driver leading to RCE


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 5.4.45-162
changelog:
  - CVE-2018-20783: fix a buffer over-read in PHAR reading functions
  - CVE-2018-19935: fix null pointer dereference in imap_mail
  - CVE-2018-14883: fix int overflow leading to heap-based buffer over-read in
    exif.c


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 5.4.45-173
changelog:
  - EA4D-782: Ensure /opt/cpanel/alt-php54/root/usr/var/run/php-fpm path is traversable by all users
    (post-install chmod o+X on path components when dirs were created before package install)


author: Juan Carlos Garcia <jgarcia@cloudlinux.com> - 5.4.45-178
changelog:
  - CVE-2026-6722: soap extension use-after-free via apache:Map duplicate keys
    (5.4 backport applies addref half only; ref_map ZVAL_PTR_DTOR is
    intentionally omitted because ref_map is heterogeneous in 5.x and the
    dtor would corrupt the xmlNodePtr entries — see patch header)
  - CVE-2026-7262: soap extension NULL pointer deref via apache:Map missing value
  - CVE-2026-7261: soap extension use-after-free with SOAP_PERSISTENCE_SESSION header parsing failure
  - CVE-2026-6735: php-fpm status endpoint XSS via unescaped request_uri and query_string
    (5.4 backport applies HTML entity escape to both HTML and JSON /status
    endpoints since php_json_encode_string() isn't exported on 5.x — JSON
    consumers will see HTML entities in request_uri/query_string fields)


author: Remi Collet <Fedora@FamilleCollet.com> 1:1.9.2-3
changelog:
  - move %{pear_docdir} to /usr/share/doc/pear
  https://fedorahosted.org/fpc/ticket/69
  - update Console_Getopt to 1.3.1 (no change)


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1:1.9.5-3
changelog:
  - Structures_Graph updated from 1.0.4 to 1.1.1
  - Archive_Tar updated from 1.3.12 to 1.4.0
  - Console_Getopt updated from 1.3.1 to 1.4.1
  - XML_Util updated from 1.2.3 to 1.3.0
  -


author: Levon Matshkalyan <lmatshkalyan@cloudlinux.com> - 0.14.2-1
changelog:
  - ALTPHP-2268: rebuild as PECL brotli extension
  - ALTPHP-2268: rename package to alt-php*-pecl-brotli


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-144
changelog:
  - Updated gnupg to 1.5.1
  - Updated uploadprogress to 1.1.4
  - Updated rar to 4.2.0
  - ALTPHP-1509: alt-ImageMagick is linked statically now
  - Updated imagick to 3.7.0


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-150
changelog:
  - ALTPHP-1751: Moved mongodb to separate package
  - ALTPHP-1752: Moved trader to separate package
  - ALTPHP-1753: Moved eio to separate package
  - ALTPHP-1756: Moved yaz to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-151
changelog:
  - ALTPHP-1778: Moved APM to separate package
  - ALTPHP-1779: Moved weakref to separate package
  - ALTPHP-1780: Moved solr to separate package
  - ALTPHP-1772: Moved LuaSandbox to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-154
changelog:
  - ALTPHP-1087: Moved amqp to separate package
  - ALTPHP-1825: Moved gnupg to separate package
  - ALTPHP-1826: Moved dbase to separate package
  - ALTPHP-1827: Moved stats to separate package
  - ALTPHP-1828: Moved pdflib to separate package
  - ALTPHP-1822: Moved oci8 to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-156
changelog:
  - ALTPHP-1960: Moved ssh2 to separate package
  - ALTPHP-1954: Moved lzf to separate package
  - ALTPHP-1955: Moved mailparse to separate package
  - ALTPHP-1962: Moved yaf to separate package
  - ALTPHP-2050  Added dependency to new xdiff extension
  - ALTPHP-1953: Moved libsodium to separate package


author: Dmitriy Popov <dpopov@cloudlinux.com> - 5.5.38-126
changelog:
  - CVE-2023-3247: Fix missing randomness check for SOAP HTTP Digest
  - Remove generated zend_language files from tarball
  - Expand allowed version list for bison package


author: Dmitriy Popov <dpopov@cloudlinux.com> - 5.5.38-131
changelog:
  - Fix for hardened PHP
  - CVE-2024-2756: fix __Host-/__Secure-cookie bypass due to partial
    CVE-2022-31629 fix
  - CVE-2024-3096: Disallow null character in bcrypt password to fix bug causing
    password_verify to erroneously return true


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 5.5.38-141
changelog:
  - Security fixes
  - CVE-2020-7071: avoid parse_url() returning a wrong host to user
  - CVE-2020-7068: fix using of freed hash key in the phar_parse_zipfile function


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 5.5.38-153
changelog:
  - EA4D-782: Ensure /opt/cpanel/alt-php55/root/usr/var/run/php-fpm path is traversable by all users
    (post-install chmod o+X on path components when dirs were created before package install)


author: Levon Matshkalyan <lmatshkalyan@cloudlinux.com> - 5.5.38-155
changelog:
  - ALTPHP-2340: Add Conflicts with zend-guard-loader < 7.0.0-9 to opcache
    subpackage to block co-install with broken old zend-guard-loader versions


author: Juan Carlos Garcia <jgarcia@cloudlinux.com> - 5.5.38-159
changelog:
  - CVE-2026-6722: soap extension use-after-free via apache:Map duplicate keys
    (5.5 backport applies addref half only; ref_map ZVAL_PTR_DTOR is
    intentionally omitted because ref_map is heterogeneous in 5.x and the
    dtor would corrupt the xmlNodePtr entries — see patch header)
  - CVE-2026-7262: soap extension NULL pointer deref via apache:Map missing value
  - CVE-2026-7261: soap extension use-after-free with SOAP_PERSISTENCE_SESSION header parsing failure
  - CVE-2026-6735: php-fpm status endpoint XSS via unescaped request_uri and query_string
    (5.5 backport applies HTML entity escape to both HTML and JSON /status
    endpoints since php_json_encode_string() isn't exported on 5.x — JSON
    consumers will see HTML entities in request_uri/query_string fields)


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 5.5.38-160
changelog:
  - Add caching_sha2_password authentication support to mysqlnd (backport from PHP 7.4),
    allowing connections to MySQL 8.0/8.4 servers using the default auth plugin
  - Add remaining utf8mb4_0900 collation ids 304-323 to mysqlnd charset table (MySQL 8.0.x/8.4)


author: Sergey Fokin <sfokin@cloudlinux.com> - 5.5.38-161
changelog:
  - CLOS-4506: Fix lsphp site-isolation ctor overwriting per-vhost DOCUMENT_ROOT
  - ALTPHP-2448: Gate %postun per-user PHP Selector reset on Elevate upgrade markers


author: Juan Carlos Garcia <jgarcia@cloudlinux.com> - 5.5.38-164
changelog:
  - CVE-2016-1283: heap buffer overflow in bundled PCRE 8.38 pcre_compile2()
    via a crafted regex with multiple identically named nested groups
    (ELSLANG-50866, ELSLANG-40077, ELSLANG-40080, ELSLANG-40110, ELSLANG-40125)
    - debian/patches/php-5.5-CVE-2016-1283.patch: backport PCRE 8.39 rev 1636 /
      PHP bug #75207 - remove the "else" so the named-group recno scan is always
      performed, over-allocating rather than under-allocating. PHP 5.5 was EOL
      before the bug #75207 backport landed for 5.6/7.0/7.1.


author: Eugene Zamriy <ezamriy@cloudlinux.com> 1:5.5.25-2
changelog:
  - group is changed to linksafe
  - add linksafe configuration to /etc/sysctl.conf in pre section
  - SCL imitation


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-133
changelog:
  - Moved igbinary to separate package
  - Moved memcache to separate package
  - Moved memcached to separate package
  - Moved grpc to separate package
  - Moved geos to separate package
  - Moved redis to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-138
changelog:
  - ALTPHP-1786: Moved propro to separate package
  - ALTPHP-1787: Moved raphf to separate package
  - ALTPHP-1788: Moved http to separate package
  - ALTPHP-1789: Moved yaml to separate package
  - ALTPHP-1781: Added dependency to new protobuf extension
  - ALTPHP-1790: Moved msgpack to separate package
  - ALTPHP-1796: CL9 support


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-146
changelog:
  - ALTPHP-2016: Moved out extensions: SPL_Types, libevent, mongo, ncurses, quickhash, radius, rsync, stem, stomp, translit, uri_template, xrange


author: Levon Matshkalyan <lmatshkalyan@cloudlinux.com> - 7.0.0-10
changelog:
  - ALTPHP-2340: Remove self-Obsoletes and Conflicts to fix DNF resolver conflict
    with old 7.0.0-8 still present in stable repos
  - ALTPHP-2340: Strip invalid RPATH from ZendGuardLoader.so to fix CL10 build
  - ALTPHP-2340: Exclude alt-php55-zend-guard-loader from RHEL >= 10 (no alt-php55-devel)


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 5.6.40-108.1
changelog:
  - ALTPHP-2148: Remove erroneous HAVE_UNIX_H from php_config.h
  - ALTPHP-2132: remove php_handler header from /etc/psa/php_versions.d/alt-php*.conf


author: Sergey Fokin <sfokin@cloudlinux.com> - 5.6.40-110
changelog:
  - ALTPHP-2132: update plesk's handler conf file
  - ALTPHP-2131: leave only one php.fpm config
  - EA4D-687: set error_log env in php.ini


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 5.6.40-117
changelog:
  - EA4D-782: Ensure /opt/cpanel/alt-php56/root/usr/var/run/php-fpm path is traversable by all users
    (post-install chmod o+X on path components when dirs were created before package install)


author: Juan Carlos Garcia <jgarcia@cloudlinux.com> - 5.6.40-122
changelog:
  - CVE-2026-6722: soap extension use-after-free via apache:Map duplicate keys
    (5.6 backport applies addref half only; ref_map ZVAL_PTR_DTOR is
    intentionally omitted because ref_map is heterogeneous in 5.x and the
    dtor would corrupt the xmlNodePtr entries — see patch header)
  - CVE-2026-7262: soap extension NULL pointer deref via apache:Map missing value
  - CVE-2026-7261: soap extension use-after-free with SOAP_PERSISTENCE_SESSION header parsing failure
  - CVE-2026-6735: php-fpm status endpoint XSS via unescaped request_uri and query_string
    (5.6 backport applies HTML entity escape to both HTML and JSON /status
    endpoints since php_json_encode_string() isn't exported on 5.x — JSON
    consumers will see HTML entities in request_uri/query_string fields)


author: Sergey Fokin <sfokin@cloudlinux.com> - 5.6.40-129
changelog:
  * Mon Jun 09 2026 Sergey Fokin <sfokin@cloudlinux.com> - 5.6.40-129
  - Bump release to include CLOS-4506 and ALTPHP-2448 in RPM tag


author: Sergey Fokin <sfokin@cloudlinux.com> - 5.6.40-132
changelog:
  - ALTPHP-2485: ship a default www.conf pool listening on a per-version unix socket (/var/run/alt-phpXY-fpm.sock) so alt-phpXY-fpm starts on non-panel hosts without colliding on 127.0.0.1:9000; php-fpm.conf already includes php-fpm.d/*.conf. group=nogroup on Debian-like distros. Ship an empty _.conf in the /opt/cpanel php-fpm.d dir so its include glob matches on non-cPanel hosts (suppresses the "Nothing matches" warning).


author: Dmitriy Popov <dpopov@cloudlinux.com> - 5.6.40-80
changelog:
  - CVE-2023-3247: Fix missing randomness check for SOAP HTTP Digest
  - Remove generated zend_language files from tarball
  - Constraint max version for bison package


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1:1.9.5-3
changelog:
  - Structures_Graph updated from 1.0.4 to 1.1.1
  - Archive_Tar updated from 1.3.15 to 1.4.0
  - Console_Getopt updated from 1.3.1 to 1.4.1
  - XML_Util updated from 1.2.1 to 1.3.0
  -


author: Eduard Abdullin <eabdullin@cloudlinux.com> 1-94
changelog:
  - ALTPHP-1195: Updated alt-ImageMagick require to 7.1.0 version
  - ALTPHP-1188: Update imagick to 3.5.1


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-113
changelog:
  - Moved timezonedb to separate package
  - Moved imagick to separate package
  - Moved xdebug to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-116
changelog:
  - ALTPHP-1786: Moved propro to separate package
  - ALTPHP-1787: Moved raphf to separate package
  - ALTPHP-1788: Moved http to separate package
  - ALTPHP-1789: Moved yaml to separate package
  - ALTPHP-1781: Added dependency to new protobuf extension
  - ALTPHP-1790: Moved msgpack to separate package


author: Huseyn Hajizada <hhajizada@cloudlinux.com> 4.2.0-3
changelog:
  - Skip test 065phpt (Directory streams with RecursiveDirectoryIterator).
  PECL RAR dir_readdir returns full paths instead of single path components,
  so RecursiveDirectoryIterator only lists 4 files instead of 10. Proper fix
  belongs in rar_stream.c (php_rar_dir_ops_read).


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 7.0.33-92
changelog:
  - Security fixes
  - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode
    filter
  - CVE-2024-11234: fix HTTP fulluri CRLF injection
  - CVE-2024-11236: prevent integer overflow in quoters causing OOB writes
  - Fix #74960: Heap buffer overflow via str_repeat


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 7.0.33-96
changelog:
  - Security fixes
  - CVE-2017-9120: Integer overflow in mysqli_real_escape_string()
  - CVE-2017-9119: handle memory limit error during string reallocation correctly
  - CVE-2017-9118: fix out of bounds access in php_pcre_replace_impl


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 7.0.33-97
changelog:
  - Security fixes
  - CVE-2019-9025: fix possible memcpy() execution with negative argument in
    mb_split()
  - CVE-2019-11034: fix possible infoleak or crush caused by read past allocated
    buffer in exif_process_IFD_TAG()


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 7.0.33-99
changelog:
  - Security fixes
  - CVE-2019-11036: fix infoleak of crash via read past allocated buffer in
    exif_process_IFD_TAG()
  - CVE-2019-11035: fix potential infoleak or crash via read past allocated buffer
    in exif_iif_add_value()


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 7.0.33-103
changelog:
  - Security fixes
  - CVE-2025-1219: fix wrong `content-type` on redirect in libxml streams
  - CVE-2025-1217: http stream wrapper: fix handling folded headers
  - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon
  - CVE-2025-1861: fix http redirect location truncation


author: Sergey Fokin <sfokin@cloudlinux.com> - 7.0.33-110
changelog:
  - ALTPHP-2132: update plesk's handler conf file
  - ALTPHP-2131: leave only one php.fpm config
  - EA4D-687: set error_log env in php.ini
  - ALTPHP-2080: Refactor debian spec


author: Juan Carlos Garcia <jgarcia@cloudlinux.com> - 7.0.33-112.2
changelog:
  - Security fixes
  - CVE-2015-9253: fix PHP-FPM exhaustion CPU and memory issue causing denial
    of service


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 7.0.33-118
changelog:
  - EA4D-782: Ensure /opt/cpanel/alt-php70/root/usr/var/run/php-fpm path is traversable by all users
    (post-install chmod o+X on path components when dirs were created before package install)


author: Juan Carlos Garcia <jgarcia@cloudlinux.com> - 7.0.33-124
changelog:
  - CVE-2026-6722: soap extension use-after-free via apache:Map duplicate keys
  - CVE-2026-7262: soap extension NULL pointer deref via apache:Map missing value
  - CVE-2026-6735: php-fpm status endpoint XSS via unescaped request_uri
  - CVE-2026-7261: soap SoapServer use-after-free after header parsing failure
    when SOAP_PERSISTENCE_SESSION is set
  - CVE-2026-7568: metaphone() signed integer overflow when called with >INT_MAX
    byte input on 64-bit builds


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 7.0.33-125
changelog:
  - Add caching_sha2_password authentication support to mysqlnd (backport from PHP 7.4),
    allowing connections to MySQL 8.0/8.4 servers using the default auth plugin


author: Sergey Fokin <sfokin@cloudlinux.com> - 7.0.33-134
changelog:
  - ALTPHP-2485: fix alt-phpXY-fpm failing to start on non-panel hosts. The default www.conf pool now listens on a per-version unix socket (/var/run/alt-phpXY-fpm.sock) instead of the shared 127.0.0.1:9000, so multiple alt-php FPM services no longer collide on the same TCP port. On Debian-like distros the pool group is set to nogroup (no nobody group). Ship an empty _.conf in the /opt/cpanel php-fpm.d dir so its include glob matches on non-cPanel hosts (suppresses the "Nothing matches" warning).


author: Daniil Leonov <dleonov@cloudlinux.com> - 7.0.33-54
changelog:
  - Fix bug #80523: Bogus parse error on >4GB source code
  - Fix bug #80672: Null Dereference in SoapClient. (CVE-2021-21702)


author: Sergey Fokin <sfokin@cloudlinux.com> - 7.0.33-66
changelog:
  - ALTPHP-1255: rebuild with removed webp support from php for getting it from alt-ImageMagick
  - ALTPHP-1266: update litespeed to 8.0.1


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 7.0.33-71
changelog:
  - Fix for Harden PHP
  - CVE-2022-31631: Fix integer overflow that could cause PDO::quote() to return an improperly quoted string
  - Fix build dependencies


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 7.0.33-86
changelog:
  - Fix for hardened PHP
  - CVE-2024-5458: Fix early-out for ipv6 hostname validation, ensure full check
    is performed


author: Dmitriy Kasyanov <dkasyanov@cloudlinux.com> 1:1.9.5-3
changelog:
  - Structures_Graph updated from 1.0.4 to 1.1.1
  - Archive_Tar updated from 1.3.15 to 1.4.0
  - Console_Getopt updated from 1.3.1 to 1.4.1
  - XML_Util updated from 1.2.1 to 1.3.0


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-93
changelog:
  - Updated gnupg to 1.5.1
  - Updated gmagick to 2.0.6RC1
  - Updated uploadprogress to 2.0.2
  - Updated rar to 4.2.0
  - ALTPHP-1509: alt-ImageMagick is linked statically now
  - Brought back old newrelic for CL6


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-96
changelog:
  - Moved swoole to separate package
  - Moved gender to separate package
  - Moved uuid to separate package
  - Moved rar to separate package
  - Added dependency to new msgpack extension in separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-98
changelog:
  - ALTPHP-1751: Moved mongodb to separate package
  - ALTPHP-1752: Moved trader to separate package
  - ALTPHP-1753: Moved eio to separate package
  - ALTPHP-1755: Moved sqlsrv to separate package
  - ALTPHP-1756: Moved yaz to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-99
changelog:
  - ALTPHP-1778: Added APM in separate package
  - ALTPHP-1779: Added weakref in separate package
  - ALTPHP-1780: Moved solr to separate package
  - ALTPHP-1772: Moved LuaSandbox to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-100
changelog:
  - ALTPHP-1786: Moved propro to separate package
  - ALTPHP-1787: Moved raphf to separate package
  - ALTPHP-1788: Moved http to separate package
  - ALTPHP-1789: Moved yaml to separate package
  - ALTPHP-1781: Added dependency to new protobuf extension


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-101
changelog:
  - ALTPHP-1800: Moved gmagick to separate package
  - ALTPHP-1801: Moved apcu to separate package
  - ALTPHP-1798: Added dependency to new apcu-bc extension
  - ALTPHP-1802: Moved rrd to separate package
  - ALTPHP-1803: Moved oauth to separate package
  - ALTPHP-1804: Moved zmq to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-103
changelog:
  - ALTPHP-1935: Moved xhprof to separate package
  - ALTPHP-1946: Moved bitset to separate package
  - ALTPHP-1947: Moved gearman to separate package
  - ALTPHP-1948: Moved geoip to separate package
  - ALTPHP-1949: Moved htscanner to separate package
  - ALTPHP-1950: Moved inotify to separate package
  - ALTPHP-1951: Moved jsmin to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-104
changelog:
  - ALTPHP-1960: Moved ssh2 to separate package
  - ALTPHP-1954: Moved lzf to separate package
  - ALTPHP-1955: Moved mailparse to separate package
  - ALTPHP-1962: Moved yaf to separate package
  - ALTPHP-2050  Added dependency to new xdiff extension
  - ALTPHP-1953: Moved libsodium to separate package
  - ALTPHP-1958: Moved psr to separate package
  - ALTPHP-1961: Moved vips to separate package, now vips is supported on CL8 and CL9


author: CloudLinux Packaging Team <packager@cloudlinux.com> - 1.81.0-1
changelog:
  - ALTPHP-2450: Update to 1.81.0 version
  - Build with GCC 10 on Ubuntu 20.04 (default GCC 9 ICEs on grpc 1.81.0)
  - Exclude PHP 8.4/8.5 on Ubuntu 16.04 (no alt-php84/85 for Xenial)


author: Eduard Chiganov <echiganov@cloudlinux.com> 3.2.15-1
changelog:
  - EA4D-454: Create alt-phpXX-pecl-igbinary.
  - ALTPHP-1686: Newer version of igbinary for alt-php 70-83.


author: CloudLinux Packaging Team <packager@cloudlinux.com> - 5.3.7-11
changelog:
  - ALTPHP-2283: Fix testObject for Redis 7+ listpack encoding.
  - ALTPHP-2283: Disable broken session tests, add platform-specific guards.
  - ALTPHP-2283: Merge older-OS test skips into main patch; apply unconditionally.


author: CloudLinux Packaging Team <packager@cloudlinux.com> - 0.13.0-2
changelog:
  - ALTPHP-2282: EL10+ support for PHP <= 7.4:
    - PHP 7.0 still needs pcre1 (its own php_pcre.h #includes "pcre.h");
      use alt-pcre-devel from /opt/alt/pcre/ on EL10+
    - PHP 7.1-7.3 on EL10+ compile cleanly against pcre2-devel
      (pcre1 removed from EL10 base repos)
    - QA_RPATHS=0x0002 to allow /opt/alt/pcre/ rpath under EL10's
      stricter brp-check-rpaths (matches alt-pcre.spec itself)
    - Apply altea-2282-pcre-test-compat.patch: switch the affected
      phpt EXPECT/EXPECTF patterns to %A-anchored EXPECTF so they
      pass on both pcre1 (EL7-9) and pcre2 (EL10+) builds. Covers
      cookies_encryption_warning/*, broken_configuration/encrypt_regexp_cookies_bad_regexp,
      and upload_validation/upload_validation


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 7.1.33-62
changelog:
  - Security fixes
  - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode
    filter
  - CVE-2024-11234: fix HTTP fulluri CRLF injection
  - CVE-2024-11236: prevent integer overflow in quoters causing OOB writes
  - Fix #74960: heap buffer overflow via str_repeat


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 7.1.33-65
changelog:
  - Security fixes
  - CVE-2017-9118: fix out of bounds access in php_pcre_replace_impl
  - CVE-2017-8923: fix integer overflow when concatenating strings
  - CVE-2017-9120: Integer overflow in mysqli_real_escape_string()
  - CVE-2017-9119: handle memory limit error during string reallocation correctly


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 7.1.33-66
changelog:
  - Security fixes
  - CVE-2019-9025: fix possible memcpy() execution with negative argument in
    mb_split()


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 7.1.33-70
changelog:
  - Security fixes
  - CVE-2025-1217: http stream wrapper: fix handling folded headers
  - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon
  - CVE-2025-1861: fix http redirect location truncation
  - CVE-2025-1219: fix wrong `content-type` on redirect in libxml streams


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 7.1.33-84
changelog:
  - EA4D-782: Ensure /opt/cpanel/alt-php71/root/usr/var/run/php-fpm path is traversable by all users
    (post-install chmod o+X on path components when dirs were created before package install)


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 7.1.33-92
changelog:
  - ALTPHP-2406: use alt-libicu65 for all OS
  - ALTPHP-2406: fix unversioned alt-libicu rpath on rhel<=8


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-83
changelog:
  - Updated gnupg to 1.5.1
  - Updated gmagick to 2.0.6RC1
  - Updated uploadprogress to 2.0.2
  - Updated rar to 4.2.0
  - ALTPHP-1509: alt-ImageMagick is linked statically now
  - ALTPHP-1507: Updated swoole to 4.8.13
  - Brought back old newrelic for CL6


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-84
changelog:
  - Moved uploadprogress to separate package
  - Moved newrelic to separate package
  - Added dependency to new scoutapm extension in separate package


author: CloudLinux Packaging Team <packager@cloudlinux.com> - 2.0.10-1
changelog:
  - ALTPHP-2500: Update to 2.0.10 version; drop php-8.4-fix-php_rand.patch
    and php85-fix.patch (absorbed upstream)


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 7.2.34-22
changelog:
  - Fix for Harden PHP
  - CVE-2022-31628: Fix potential infinite recursion in phar wrapper when using quine gzip file
  - CVE-2022-31629: Add cookie integrity validation


author: Pavel Mayorov <pmayorov@cloudlinux.com> - 7.2.34-23
changelog:
  - Fix for Harden PHP
  - CVE-2022-37454: Fix buffer overflow in the Keccak XKCP SHA-3 reference implementation


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 7.2.34-47
changelog:
  - Security fixes
  - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode
    filter
  - CVE-2024-11234: fix HTTP fulluri CRLF injection
  - CVE-2024-11236: prevent integer overflow in quoters causing OOB writes
  - Fix #74960: heap buffer overflow via str_repeat
  - Fix #74267: segfault with streams and invalid data


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 7.2.34-50
changelog:
  - Security fixes
  - CVE-2019-19246: fix heap-based buffer over-read in str_lower_case_match in
    regexec.c
  - CVE-2019-9025: fix possible memcpy() execution with negative argument in
    mb_split()


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 7.2.34-52
changelog:
  - Security fixes
  - CVE-2017-8923: fix integer overflow when concatenating strings
  - CVE-2017-9118: fix out of bounds access in php_pcre_replace_impl
  - CVE-2017-9119: handle memory limit error during string reallocation correctly
  - CVE-2017-9120: Integer overflow in mysqli_real_escape_string()


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 7.2.34-66
changelog:
  - EA4D-782: Ensure /opt/cpanel/alt-php72/root/usr/var/run/php-fpm path is traversable by all users
    (post-install chmod o+X on path components when dirs were created before package install)


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-75
changelog:
  - ALTPHP-1269: Update xdebug to 3.1.4 version
  - Update timezonedb to version 2021.5
  - Update imagick to version 3.6.0
  - Update mongodb to version 1.13.0
  - Update swoole to version 4.8.9


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-87
changelog:
  - Updated gnupg to 1.5.1
  - Updated gmagick to 2.0.6RC1
  - Updated uploadprogress to 2.0.2
  - alt-ImageMagick is linked statically now
  - Updated swoole to 4.8.13
  - Brought back old newrelic for CL6


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-90
changelog:
  - Moved swoole to separate package
  - Moved gender to separate package
  - Moved uuid to separate package
  - Added dependency to new rar extension in separate package
  - Added dependency to new msgpack extension in separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-93
changelog:
  - ALTPHP-1778: Added APM in separate package
  - ALTPHP-1779: Added weakref in separate package
  - ALTPHP-1780: Added solr in separate package
  - ALTPHP-1772: Moved LuaSandbox to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-98
changelog:
  - ALTPHP-1960: Moved ssh2 to separate package
  - ALTPHP-1954: Moved lzf to separate package
  - ALTPHP-1955: Moved mailparse to separate package
  - ALTPHP-1962: Moved yaf to separate package
  - ALTPHP-2050  Added dependency to new xdiff extension
  - ALTPHP-1958: Moved psr to separate package
  - ALTPHP-1961: Moved vips to separate package, now vips is supported on CL8 and CL9
  - ALTPHP-1956: Moved mcrypt to separate package
  - ALTPHP-1959: Moved pthreads to separate package (zts only)
  - Added missing links to zts extensions


author: CloudLinux Packaging Team <packager@cloudlinux.com> - 1.0.7-2
changelog:
  - ALTPHP-2396: Add explicit Requires: libmcrypt so yum pulls libmcrypt
    from alt-common on CL10 instead of ea-libmcrypt (cPanel) which installs
    outside the system LD path.


author: Levon Matshkalyan <levon.matshkalyan@cloudlinux.com> - 5.0.4-3
changelog:
  - ALTPHP-2268: Add Provides/Obsoletes for zts in tideways-zts subpackage to support rename and avoid file conflicts


author: Dmitriy Popov <dpopov@cloudlinux.com> - 7.3.33-23
changelog:
  - Fix for hardened PHP
  - CVE-2024-3096: Disallow null character in bcrypt password to fix bug causing
    password_verify to erroneously return true
  - CVE-2024-2756: fix __Host-/__Secure-cookie bypass due to partial
    CVE-2022-31629 fix


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 7.3.33-33
changelog:
  - Security fixes
  - CVE-2024-11234: fix HTTP fulluri CRLF injection
  - CVE-2024-11236: prevent integer overflow in quoters causing OOB writes
  - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode
    filter


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 7.3.33-36
changelog:
  - Security fixes
  - CVE-2017-8923: fix integer overflow when concatenating strings
  - CVE-2017-9118: fix out of bounds access in php_pcre_replace_impl


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 7.3.33-52
changelog:
  - EA4D-782: Ensure /opt/cpanel/alt-php73/root/usr/var/run/php-fpm path is traversable by all users
    (post-install chmod o+X on path components when dirs were created before package install)


author: Sergey Fokin <sfokin@cloudlinux.com> - 7.3.33-67
changelog:
  - ALTPHP-2485: fix alt-phpXY-fpm failing to start on non-panel hosts. The default
    www.conf pool now listens on a per-version unix socket
    (/var/run/alt-phpXY-fpm.sock) instead of the shared 127.0.0.1:9000, so multiple
    alt-php FPM services no longer collide on the same TCP port. On Debian-like
    distros the pool group is set to nogroup (no nobody group exists there). Ship
    an empty _.conf in the /opt/cpanel php-fpm.d dir so its include glob matches on
    non-cPanel hosts (suppresses the "Nothing matches" warning).


author: Ivan Danilov <idanilov@cloudlinux.com> - 1-36
changelog:
  - ALTPHP-1023: update tideways to 5.0.4
  - ALTPHP-1027: update igbinary to 3.2.1
  - ALTPHP-1095: Add memcache and support of igbinary in memcached


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-47
changelog:
  - ALTPHP-1269: Update xdebug to 3.1.4 version
  - Update timezonedb to version 2021.5
  - Update mongodb to version 1.13.0
  - Update swoole to version 4.8.9
  - Update pdo_sqlsrv to version 5.10.1
  - Update sqlsrv to version 5.10.1
  - Update imagick to version 3.7.0


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-66
changelog:
  - ALTPHP-1935: Moved xhprof to separate package
  - ALTPHP-1946: Added dependency to new bitset extension
  - ALTPHP-1947: Moved gearman to separate package
  - ALTPHP-1948: Moved geoip to separate package
  - ALTPHP-1949: Added dependency to new htscanner extension
  - ALTPHP-1950: Moved inotify to separate package
  - ALTPHP-1951: Moved jsmin to separate package
  - ALTPHP-1952: Moved leveldb to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-67
changelog:
  - ALTPHP-1960: Moved ssh2 to separate package
  - ALTPHP-1954: Moved lzf to separate package
  - ALTPHP-1955: Moved mailparse to separate package
  - ALTPHP-1962: Moved yaf to separate package
  - ALTPHP-2050  Added dependency to new xdiff extension
  - ALTPHP-1958: Moved psr to separate package
  - ALTPHP-1961: Moved vips to separate package, now vips is supported on CL8 and CL9
  - ALTPHP-1956: Moved mcrypt to separate package


author: Sergey Fokin <sfokin@cloudlinux.com> - 7.4.33-3
changelog:
  - ALTPHP-1355: fix linksafe for all sub-packages
  - fix rpath for zip extension
  - add alt-php74-imunify-leveldb provides


author: Sergey Fokin <sfokin@cloudlinux.com> - 7.4.33-18
changelog:
  - ALTPHP-953: restart lsphp when update its binary
  - ALTPHP-1573: update LiteSpeed to 8.1
  - ALTPHP-1665: pack fpm as sub-package


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 7.4.33-28
changelog:
  - Security fixes
  - CVE-2024-8925: Fix data integrity violation while parsing multipart/form-data
    boundaries larger than the read buffer
  - CVE-2024-9026: Fix possible altering of children logs
  - CVE-2024-8927: Fix bypass of cgi.force_redirect configuration


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 7.4.33-43
changelog:
  - ALTPHP-2168: Add include= to php-fpm.conf
  - ALTPHP-2168: Make the paths in php-fpm.conf and logrotate even


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 7.4.33-49
changelog:
  - EA4D-782: Ensure /opt/cpanel/alt-php74/root/usr/var/run/php-fpm path is traversable by all users
    (post-install chmod o+X on path components when dirs were created before package install)


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 7.4.33-63
changelog:
  - ALTPHP-2518: on el7, link mbstring against alt-oniguruma instead of the
    system oniguruma. Build with PKG_CONFIG_PATH and RPATH pointing at
    /opt/alt/oniguruma and add Requires: alt-oniguruma. Fixes the unresolvable
    "libonig.so.5()(64bit)" dependency when installing alt-php74-mbstring on
    el7-family bases whose system oniguruma is older than 6.x (e.g. Amazon
    Linux 2, which ships oniguruma 5.9.6 providing only libonig.so.2). el8/el9
    keep using the system oniguruma, which already provides libonig.so.5.


author: Eduard Abdullin <eabdullin@cloudlinux.com> 1-24
changelog:
  - ALTPHP-1195: Updated alt-ImageMagick require to 7.1.0 version
  - ALTPHP-1188: Update imagick to 3.5.1
  - ALTPHP-1197: Added cyrus-sasl-plain to requires


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-53
changelog:
  - ALTPHP-1935: Moved xhprof to separate package
  - ALTPHP-1946: Added dependency to new bitset extension
  - ALTPHP-1947: Moved gearman to separate package
  - ALTPHP-1948: Moved geoip to separate package
  - ALTPHP-1949: Added dependency to new htscanner extension
  - ALTPHP-1950: Moved inotify to separate package
  - ALTPHP-1951: Moved jsmin to separate package
  - ALTPHP-1952: Added dependency to new leveldb extension


author: CloudLinux Packaging Team <packager@cloudlinux.com> - 6.3.0-10
changelog:
  - ALTPHP-2283: Update to 6.3.0 version (fixes testServerInfo on Redis 8 / Valkey; upstream PR phpredis#2656).


author: CloudLinux Packaging Team <packager@cloudlinux.com> - 6.3.0-11
changelog:
  - ALTPHP-2283: Fix test suite failures: add Redis version guards for tests requiring Redis 6.0+/6.2+.
  - ALTPHP-2283: Disable broken session tests, add platform-specific guards.
  - ALTPHP-2283: Disable testIgnoreNumbers, testExists, testServerInfo, testPackHelpers (fail on older Redis / PHP 8.5).


author: Ivan Danilov <idanilov@cloudlinux.com> - 8.0.0s-2
changelog:
  - ALTPHP-1026: Fixed directory for scanning ini files
  - ALTPHP-1029: Fixed adding records for alt-php80 in selector.conf
  - ALTPHP-1028: Fixed scripts to make usage of php 8.0 possible for panels
  - ALTPHP-1025: Add lsphp to requires of php-cli package


author: Ivan Danilov <idanilov@cloudlinux.com> - 8.0.0s-3
changelog:
  - ALTPHP-1036: Disable unnecessary config files from alt-php80 in httpd conf directory
  - ALTPHP-1039: Fix of permissions for provided files


author: Dmitriy Popov <dpopov@cloudlinux.com> - 8.0.30-8
changelog:
  - Fix for hardened PHP
  - CVE-2024-3096: Disallow null character in bcrypt password to fix bug
    causing password_verify to erroneously return true
  - CVE-2024-2756: fix __Host-/__Secure-cookie bypass due to partial
    CVE-2022-31629 fix


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 8.0.30-11
changelog:
  - Actually apply php-8.0-CVE-2024-3096.patch and php-8.0-CVE-2024-2756.patch
    for Ubuntu < 22.04 and Debian < 11 systems


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 8.0.30-23
changelog:
  - Security fixes
  - CVE-2025-1217: http stream wrapper: fix handling folded headers
  - CVE-2025-1734: http stream wrapper: fix handling headers with invalid name and no colon
  - CVE-2025-1861: fix http redirect location truncation
  - CVE-2025-1219: fix wrong `content-type` on redirect in libxml streams
  - fix regression in CVE-2024-11234 patch


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 8.0.30-25
changelog:
  - Security fixes
  - CVE-2025-6491: fix NULL pointer dereference in PHP SOAP extension via large
    XML namespace prefix
  - CVE-2025-1220: fix null byte termination in hostnames


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 8.0.30-37
changelog:
  - EA4D-782: Ensure /opt/cpanel/alt-php80/root/usr/var/run/php-fpm path is traversable by all users
    (post-install chmod o+X on path components when dirs were created before package install)


author: Juan Carlos Garcia <jgarcia@cloudlinux.com> - 8.0.30-42
changelog:
  - CVE-2026-6722: soap extension use-after-free via apache:Map duplicate keys
  - CVE-2025-14179: pdo_firebird SQL injection via NUL bytes in quoted strings
  - CVE-2026-7262: soap extension NULL pointer deref via apache:Map missing value
  - CVE-2026-6735: php-fpm status endpoint XSS via unescaped request_uri
  - CVE-2026-7259: mbstring NULL pointer dereference in php_mb_check_encoding()
    via mb_ereg_search_init() with Oniguruma-only encodings (iso-8859-11, UJIS,
    KOI8-R, ...)
  - CVE-2026-7261: soap SoapServer use-after-free after header parsing failure
    when SOAP_PERSISTENCE_SESSION is set
  - CVE-2026-7568: metaphone() signed integer overflow when called with >INT_MAX
    byte input on 64-bit builds


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 8.0.30-52
changelog:
  - ELS-2362: generate Plesk psa handler files only on rhel>=7 to match the
    %files guard (fixes "installed but unpackaged" psa files on EL6/CL6)


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 8.0.30-54
changelog:
  - ALTPHP-2518: on el7, link mbstring against alt-oniguruma instead of the
    system oniguruma. Build with PKG_CONFIG_PATH and RPATH pointing at
    /opt/alt/oniguruma and require alt-oniguruma. Fixes the unresolvable
    "libonig.so.5()(64bit)" dependency when installing alt-php80-mbstring on
    el7-family bases whose system oniguruma is older than 6.x (e.g. Amazon
    Linux 2, which ships oniguruma 5.9.6 providing only libonig.so.2). el8/el9
    keep using the system oniguruma, which already provides libonig.so.5.


author: Eduard Abdullin <eabdullin@cloudlinux.com> - 1-6
changelog:
  - Update dbase to 7.1.0RC2
  - Add gmagick-2.0.6RC1
  - Add gnupg-1.5.0RC2(only CL7)
  - Add grpc-1.36.0
  - Add igbinary-3.2.1
  - Add mongodb-1.9.0
  - Add oauth-2.0.7
  - Add oci8-3.0.1
  - Add sqlsrv- & pdo_sqlsrv- -5.9.0
  - Add swoole-4.6.4
  - Add trader-0.5.1
  - Add uploadprogress 1.1.3
  - Add xdebug 3.0.3
  - Add yaml to 2.2.1


author: Ivan Danilov <idanilov@cloudlinux.com> - 1-8
changelog:
  - ALTPHP-1023: update tideways to 5.0.4
  - ALTPHP-1095: Add memcache and support of igbinary in memcached


author: Sergey Fokin <sfokin@cloudlinux.com> - 1-24
changelog:
  - update inotify to 3.0.0
  - update timezonedb to 2020.4
  - update xdebug to 3.1.4
  - update yaf to 3.3.5
  - ALTPHP-1313: Updated MongoDB to 1.14.0


author: Eduard Chiganov <echiganov@cloudlinux.com> - 1-28
changelog:
  - ALTPHP-1402: update mailparse to 3.1.4
  - ALTPHP-1408: Redis extension updated to 5.3.7
  - yaz updated to 1.2.4


author: Eduard Chiganov <echiganov@cloudlinux.com> - 1-28
changelog:
  - ALTPHP-1402: update mailparse to 3.1.4
  - ALTPHP-1408: Redis extension updated to 5.3.7
  - ALTPHP-1507: Swoole extension updated to 5.0.3
  - ALTPHP-1509: alt-ImageMagick is linked statically now
  - yaz updated to 1.2.4


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-31
changelog:
  - Fixed requires
  - Brought back yaf and gnupg
  - Updated uploadprogress to 2.0.2
  - Updated vips to 1.0.13
  - Updated gnupg to 1.5.1
  - alt-ImageMagick is linked statically now
  - Updated swoole to 5.0.3


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-33
changelog:
  - Moved igbinary to separate package
  - Moved memcache to separate package
  - Moved memcached to separate package
  - Moved grpc to separate package
  - Moved redis to separate package
  - Added dependency to new geos ext


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-34
changelog:
  - Moved swoole to separate package
  - Moved uuid to separate package
  - Added dependency to new rar extension in separate package
  - Added dependency to new msgpack extension in separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-36
changelog:
  - ALTPHP-1751: Moved mongodb to separate package
  - ALTPHP-1752: Moved trader to separate package
  - ALTPHP-1753: Moved eio to separate package
  - ALTPHP-1754: Moved xmlrpc to separate package
  - ALTPHP-1755: Moved sqlsrv to separate package
  - ALTPHP-1756: Moved yaz to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-38
changelog:
  - ALTPHP-1787: Moved raphf to separate package
  - ALTPHP-1788: Moved http to separate package
  - ALTPHP-1789: Moved yaml to separate package
  - ALTPHP-1781: Added dependency to new protobuf extension


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-39
changelog:
  - ALTPHP-1800: Moved gmagick to separate package
  - ALTPHP-1801: Moved apcu to separate package
  - ALTPHP-1802: Moved rrd to separate package
  - ALTPHP-1803: Moved oauth to separate package
  - ALTPHP-1804: Moved zmq to separate package


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-40
changelog:
  - ALTPHP-1087: Moved amqp to separate package
  - ALTPHP-1825: Moved gnupg to separate package
  - ALTPHP-1826: Moved dbase to separate package
  - ALTPHP-1827: Moved stats to separate package
  - ALTPHP-1828: Moved pdflib to separate package


author: Levon Matshkalyan <lmatshkalyan@cloudlinux.com> - 5.9.3-2
changelog:
  - ALTPHP-2268: Fix building for PHP 8.5 (php_smart_string.h removed)
  - ALTPHP-2268: Fix building for PHP 8.5 (zend_exception_get_default() replaced with zend_ce_exception)
  - ALTPHP-2268: Fix BuildRequires for CL10 (pcre-devel removed, use pcre2-devel only)


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 8.1.34-6
changelog:
  - EA4D-782: Ensure /opt/cpanel/alt-php81/root/usr/var/run/php-fpm path is traversable by all users
    (post-install chmod o+X on path components when dirs were created before package install)


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 8.1.34-15
changelog:
  - ALTPHP-2406: use alt-libicu71 for all OS
  - ALTPHP-2406: drop duplicated 71 in PKG_CONFIG_PATH on rhel<=8


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 8.1.34-23
changelog:
  - ALTPHP-2518: on el7, link mbstring against alt-oniguruma instead of the
    system oniguruma. Build with PKG_CONFIG_PATH and RPATH pointing at
    /opt/alt/oniguruma and require alt-oniguruma. Fixes the unresolvable
    "libonig.so.5()(64bit)" dependency when installing alt-php81-mbstring on
    el7-family bases whose system oniguruma is older than 6.x (e.g. Amazon
    Linux 2, which ships oniguruma 5.9.6 providing only libonig.so.2). el8/el9
    keep using the system oniguruma, which already provides libonig.so.5.


author: Eduard Chiganov <echiganov@cloudlinux.com> - 1-6
changelog:
  - ALTPHP-1281: Sqlsrv and pdosqlsrv extensions updated to 5.10.1
  - Imagick updated to 3.7.0
  - Oci8 updated to 3.2.1


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-7
changelog:
  - ALTPHP-1313: Updated MongoDB to 1.14.0
  - enable building newrelic
  - add propro 2.1.0
  - add solr 2.5.1
  - add yaz 1.2.3
  - update amqp to 1.11.0
  - update grpc to 1.36.0
  - update newrelic to 10.0.0.312
  - update xdebug to 3.1.4
  - update yaf to 3.3.5


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-19
changelog:
  - Fixed requires
  - Updated mcrypt to 1.0.6
  - Updated vips to 1.0.13
  - alt-ImageMagick is linked statically now
  - Updated swoole to 5.0.3


author: Sergey Fokin <sfokin@cloudlinux.com> - 8.2.5-2
changelog:
  - ALTPHP-1487: add opcache.jit_buffer_size=100M as default value to opcache.ini
  - rebuild without ffi for rhel < 7
  - add provides and obsoletes for alt-php-internal-sqlite3


author: Sergey Fokin <sfokin@cloudlinux.com> - 8.2.16-1
changelog:
  - update to 8.2.16
  - ALTPHP-1665: pack fpm as sub-package
  - ALTPHP-953: restart lsphp wheb update its binary


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 8.2.30-6
changelog:
  - EA4D-782: Ensure /opt/cpanel/alt-php82/root/usr/var/run/php-fpm path is traversable by all users
    (post-install chmod o+X on path components when dirs were created before package install)


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 8.2.31-10
changelog:
  - ALTPHP-2518: on el7, link mbstring against alt-oniguruma instead of the
    system oniguruma. Build with PKG_CONFIG_PATH and RPATH pointing at
    /opt/alt/oniguruma and require alt-oniguruma. Fixes the unresolvable
    "libonig.so.5()(64bit)" dependency when installing alt-php82-mbstring on
    el7-family bases whose system oniguruma is older than 6.x (e.g. Amazon
    Linux 2, which ships oniguruma 5.9.6 providing only libonig.so.2). el8/el9
    keep using the system oniguruma, which already provides libonig.so.5.


author: Levon Matshkalyan <lmatshkalyan@cloudlinux.com> - 3-24
changelog:
  - ALTPHP-2242: Default to native driver extensions (nd_mysqli/nd_pdo_mysql) on
    php82+. Client-lib bindings stay installed for all versions; switch between
    native and bindings with alt-php-mysql-reconfigure.py --driver native|binding.


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-20
changelog:
  - Fixed requires
  - Updated mcrypt to 1.0.6
  - Updated vips to 1.0.13
  - Updated yaml to 2.2.3
  - Updated igbinary to 3.2.14
  - alt-ImageMagick is linked statically now
  - Updated swoole to 5.0.3


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-31
changelog:
  - ALTPHP-1935: Moved xhprof to separate package
  - ALTPHP-1946: Moved bitset to separate package
  - ALTPHP-1947: Moved gearman to separate package
  - ALTPHP-1948: Moved geoip to separate package
  - ALTPHP-1949: Moved htscanner to separate package
  - ALTPHP-1950: Moved inotify to separate package
  - ALTPHP-1951: Moved jsmin to separate package
  - ALTPHP-1952: Moved leveldb to separate package


author: Sergey Fokin <sfokin@cloudlinux.com> - 8.3.3-1
changelog:
  - update to 8.3.3
  - ALTPHP-1665: pack fpm as sub-package
  - ALTPHP-953: restart lsphp wheb update its binary


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 8.3.30-6
changelog:
  - EA4D-782: Ensure /opt/cpanel/alt-php83/root/usr/var/run/php-fpm path is traversable by all users
    (post-install chmod o+X on path components when dirs were created before package install)


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 8.3.31-11
changelog:
  - ALTPHP-2518: on el7, link mbstring against alt-oniguruma instead of the
    system oniguruma. Build with PKG_CONFIG_PATH and RPATH pointing at
    /opt/alt/oniguruma and require alt-oniguruma. Fixes the unresolvable
    "libonig.so.5()(64bit)" dependency when installing alt-php83-mbstring on
    el7-family bases whose system oniguruma is older than 6.x (e.g. Amazon
    Linux 2, which ships oniguruma 5.9.6 providing only libonig.so.2). el8/el9
    keep using the system oniguruma, which already provides libonig.so.5.


author: Sergey Fokin <sfokin@cloudlinux.com> - 8.3.30-1
changelog:
  - ALTPHP-2281: update to 8.3.30
  - build percona5.7 without stick to version of alt-php
  - rollback building mysql5.6 for CL9


author: Eduard Chiganov <echiganov@cloudlinux.com> - 8.4.0-0.rc3
changelog:
  - ALTPHP-1880: Updated to RC3.
  - ALTPHP-1860: Remove deprecated sid_length and sid_bits settings.
  - Disabled thread safety by default.


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 8.4.18-3
changelog:
  - EA4D-782: Ensure /opt/cpanel/alt-php84/root/usr/var/run/php-fpm path is traversable by all users
    (post-install chmod o+X on path components when dirs were created before package install)


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 8.4.22-8
changelog:
  - ALTPHP-2518: on el7, link mbstring against alt-oniguruma instead of the
    system oniguruma. Build with PKG_CONFIG_PATH and RPATH pointing at
    /opt/alt/oniguruma and require alt-oniguruma. Fixes the unresolvable
    "libonig.so.5()(64bit)" dependency when installing alt-php84-mbstring on
    el7-family bases whose system oniguruma is older than 6.x (e.g. Amazon
    Linux 2, which ships oniguruma 5.9.6 providing only libonig.so.2). el8/el9
    keep using the system oniguruma, which already provides libonig.so.5.


author: CloudLinux Packaging Team <packager@cloudlinux.com> - 8.4.17-1
changelog:
  - ALTPHP-2280: Update to 8.4.17 version
  - build percona5.7 without stick to version of alt-php
  - rollback building mysql5.6 for CL9


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-3
changelog:
  - ALTPHP-1935: Added xhprof in separate package
  - ALTPHP-1946: Added bitset in separate package
  - ALTPHP-1947: Moved gearman to separate package
  - ALTPHP-1948: Moved geoip to separate package
  - ALTPHP-1949: Added htscanner in separate package
  - ALTPHP-1950: Moved inotify to separate package
  - ALTPHP-1951: Moved jsmin to separate package
  - ALTPHP-1952: Added leveldb in separate package


author: Sergey Fokin <sfokin@cloudlinux.com> - 1-4
changelog:
  - ALTPHP-2043: add to requires:
      alt-php84-newrelic
      alt-php84-pecl-gender
      alt-php84-pecl-propro


author: Eduard Chiganov <echiganov@cloudlinux.com> - 1-4.1
changelog:
  - ALTPHP-2053: Added alt-php84-pspell to requires.
  - Added libssh2-devel for requires, becase ssh2 module requires it.


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 1-5
changelog:
  - ALTPHP-1960: Moved ssh2 to separate package
  - ALTPHP-1954: Moved lzf to separate package
  - ALTPHP-1955: Moved mailparse to separate package
  - ALTPHP-1962: Moved yaf to separate package
  - ALTPHP-2050  Added dependency to new xdiff extension
  - ALTPHP-1953: Moved libsodium to separate package
  - ALTPHP-1958: Moved psr to separate package
  - ALTPHP-1961: Moved vips to separate package, now vips is supported on CL8 and CL9
  - ALTPHP-1956: Moved mcrypt to separate package
  - ALTPHP-2063: Removed unsupported propro extension


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 4.2.6-3
changelog:
  - Use PECL version instead of testing one
  - ALTPHP-2063: Add obsoletes for alt-php-pecl-propro on PHP8


author: Ilya Voyskovsky <ivoyskovsky@cloudlinux.com> - 8.5.3-4
changelog:
  - EA4D-782: Ensure /opt/cpanel/alt-php85/root/usr/var/run/php-fpm path is traversable by all users
    (post-install chmod o+X on path components when dirs were created before package install)


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 8.5.7-7
changelog:
  - ALTPHP-2518: on el7, link mbstring against alt-oniguruma instead of the
    system oniguruma. Build with PKG_CONFIG_PATH and RPATH pointing at
    /opt/alt/oniguruma and require alt-oniguruma. Fixes the unresolvable
    "libonig.so.5()(64bit)" dependency when installing alt-php85-mbstring on
    el7-family bases whose system oniguruma is older than 6.x (e.g. Amazon
    Linux 2, which ships oniguruma 5.9.6 providing only libonig.so.2). el8/el9
    keep using the system oniguruma, which already provides libonig.so.5.


author: Petr Kubat <pkubat@redhat.com> - 9.2.21-1
changelog:
  - update to 9.2.21 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-19.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.22-1
changelog:
  - update to 9.2.22 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-22.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.23-1
changelog:
  - update to 9.2.23 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-23.html


author: Pavel Kajaba <pkajaba@redhat.com> - 9.2.15-1
changelog:
  - update to 9.2.15 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-15.html


author: Petr Kubat <pkubat@redhat.com> - 9.2.18-1
changelog:
  - update to 9.2.18 per release notes
    http://www.postgresql.org/docs/9.2/static/release-9-2-18.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-17.html
    http://www.postgresql.org/docs/9.2/static/release-9-2-16.html


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 2.1-2
changelog:
  - MODLVE-438: pump kapi version
  - KMODLVE-417: fine-grained options for lve_enter
  - LU-2354: Split liblve.so into liblve and libsecureio


author: Denis Kirjanov <dkirjanov@cloudlinux.com> - 2.1-11
changelog:
  - KMODLVE-553 liblve debian packaging fix
  - CAG-1221: make CageFS namespaces persistent
  - KMODLVE-549 secureio symbol visible fixes
  - KMODLVE-548 lto build fix
  - KMODLVE-536  lto support
  - KMODLVE-544: make lve* functions work without LVE
  - KMODLVE-521 cl9 support
  - CAG-1208: implement entering CageFS without LVE
  - CAG-1208: implement CageFS without LVE


author:
  alutsiuk <alutsiuk@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Sandro Kalatozishvili <skalatozishvili@cloudlinux.com>, nkeshelava <nkeshelava@cloudlinux.com> - 2.2-1

changelog:
  - CLOS-3672: Implementation for website isolation feature
  - CLOS-3755: Apply per user mounts to website isolation
  - CLOS-3719: Setup /tmp for website isolation feature
  - CLOS-3772: Optimize mount calls for website isolation
  - CLOS-3764: Add caching of website isolation namespaces
  - CLOS-3717: Drop capabilities only when present


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> - 2.2-2
changelog:
  - CLOS-3912: Add NULL pointer validation in jail functions to prevent crashes
  - CLOS-3942: Fix failure on Solo when process cannot enter CageFS


author:
  Oleksandr Shyshatkyi <oshyshatskyi@cloudlinux.com>, Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> - 2.2-4

changelog:
  - CLOS-3996: Consolidate domain ID registry into universal C module with Python bindings
  - CLOS-3964: Implemented hierarchical LVP support in lve-kmod


author: Georgy Lepsaya <glepsaya@cloudlinux.com>, Anastasia Lutsiuk <alutsiuk@cloudlinux.com> - 2.2-6
changelog:
  - CLOS-4382: Skip cgroup-v1 mount loop in lve-kmod.sh on cgroup-v2 systems
  - CLOS-4343: Fix per-site namespace cache directory permissions in jail.c after a non-isolated request


author:
  Georgy Lepsaya <glepsaya@cloudlinux.com>, Anastasia Lutsiuk <alutsiuk@cloudlinux.com>, Sandro Kalatozishvili <skalatozishvili@cloudlinux.com> - 2.2-6

changelog:
  - CLOS-4382: Skip cgroup-v1 mount loop in lve-kmod.sh on cgroup-v2 systems
  - CLOS-4343: Fix per-site namespace cache directory permissions in jail.c after a non-isolated request
  - CLOS-4349: Fix website isolation on AlmaLinux 10 with stock httpd


author: Georgy Lepsaya <glepsaya@cloudlinux.com>, Roman Prilipskii <rprilipskii@cloudlinux.com> - 2.2-7
changelog:
  - CLOS-3536: Switch to alt-python-internal build-time dependency
  - CLOS-4366: propagate lve_root_setup rc and gate jail.c LVE override to per-domain range


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.9.1-1
changelog:
  - Update to upstream 1.9.1 because of security issues with the bundled
    python-pip in older releases.  This is just a quick fix until a
    python-virtualenv maintainer can unbundle the python-pip package
    see: https://bugzilla.redhat.com/show_bug.cgi?id=749378


author: Tomas Orsava <torsava@redhat.com> - 1.10.1-3
changelog:
  - Added a patch that shows a custom error message when a FILE passed to
    virtualenv to be used as 'home dir' already exists and is NOT a directory.
  Resolves: rhbz#1306513


author: Charalampos Stratakis <cstratak@redhat.com> - 15.1.0-1
changelog:
  - Rebase to version 15.1.0
  - Disable automatic downloads from pypi on new venv creation
  Resolves: rhbz#1461154


author: Anatholy Scryabin <ascryabin@cloudlinux.com> - 2.7.12-2
changelog:
  - add locked extensions
  - add condition for build without linksafe
  - conflict with lvemanager < 1.0-9.43


author: Anatholy Scryabin <ascryabin@cloudlinux.com> - 2.7.12-4
changelog:
  - refactored patches 102, 112, 134, 189, 200, 209
  - remove patch 166
  - fix for CVE-2016-1000110 HTTProxy attack


author: Anatholy Scryabin <ascryabin@cloudlinux.com> - 2.7.13-1
changelog:
  - update to 2.7.13
  - enable embeded expat
  - refresh patches 102, 112, 167, 191
  - remove paatch 146, 180, 184, 187, 200, 209, 242


author: Vasiliy Kleschov <vkleschov@cloudlinux.com> - 1-6
changelog:
  - Added requirements for mariadb103 and mysql8.0 bindings
  - Added triggers for mariadb103 and mysql8.0 packages


author: Brian C. Lane <bcl@redhat.com> 1.1-3
changelog:
  - Add patch to fix metaclass recursion (upstream bug #25)
    https://bitbucket.org/logilab/astroid/issue/25/runtimeerror-maximum-recursion-depth


author: Brian C. Lane <bcl@redhat.com> 1.3.6-1
changelog:
  - Upstream v1.3.6
  - Fix for python3.4 multiprocessing
    https://bitbucket.org/logilab/pylint/issue/265/


author: Miro Hrončok <mhroncok@redhat.com> - 2.2.1-1
changelog:
  - Updated to 2.2.1
  - Introduced Python 3 subpackage (upstream has merged the codebase)
  - Removed BuildRoot and python_sitelib definition
  - Use python2 macros instead of just python


changelog: - PTCLLIB-31: make cloudlinux cpapi work on cl5 (python 2.4)
author:
  Konstantin Vaskovtsov <derkonstantin@cloudlinux.com>, Alexander Grynchuk <agrynchuk@cloudlinux.com> 1.1-12


author: Pavel Negrobov <pnegrobov@cloudlinux.com> 1.1-14
changelog:
  - PTCLLIB-35: Fix config parser bug when reading values with percent symbols
  - PTCLLIB-34: Add ability to form e-mail messages with jinja2


author: Illarion Kovalchuk <ikovalchuk@cloudlinux.com> 1.1-15
changelog:
  - Version update
  - PTCLLIB-35: Fix config parser bug when reading values with percent symbols
  - PTCLLIB-34: Add ability to form e-mail messages with jinja2


author:
  Alexander Grynchuk <agrynchuk@cloudlinux.com>, Anton Volkov <avolkov@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com>, Konstantin Vaskovtsov <derkonstantin@cloudlinux.com>, Illarion Kovalchuk <ikovalchuk@cloudlinux.com> 1.2-4

changelog:
  - PTCLLIB-40 fix: attempts to call secureio.logging fail with exception
  - PTCLLIB-37 - test python syntax and unit tests while building rpm package. Build alt-python27-cllib by default
  - LU-134: Fix traceback while trying to set a very large value of the limit in lvectl
  - PTCLLIB-32: move *secure functions from cagefslib.py to separate library (secureio.py)
  - CAG-227: Improve debugging tools


author:
  Konstantin Vaskovtsov <derkonstantin@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com> 1.2-5

changelog:
  - PTCLLIB-42: Message about ' install mysql-python ' should be renamed to 'install alt-python27'
  - PTCLLIB-41: Fix log error related with psutil bug


author: M Zhbankov <mzhbankov@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com> 1.2-7
changelog:
  - PTCLLIB-22 fix: Add ability to add groups to /etc/sudoers
  - PTCLLIB-43: Fix broken cpapi for cPanel 11.52


author: M Zhbankov <mzhbankov@cloudlinux.com> 1.2-8
changelog:
  - PTCLLIB-47: determine admin password for database access in Plesk correctly
  - PTCLLIB-44: improve detection of DirectAdmin


author:
  Konstantin Vaskovtsov <derkonstantin@cloudlinux.com>, M Zhbankov <mzhbankov@cloudlinux.com> 1.2-11.1

changelog:
  - PTCLLIB - 29: add API for getting domains data (DirectAdmin)
  - LU-172: add handling of LVE version 9
  - PTCLLIB-54:Move cllimits/mysql_governor_lib.py from LU to PTCLLIB
  - PTCLLIB-52: generate unit tests coverage information while building rpm


author:
  Dmitry Shibut <dshibut@cloudlinux.com>, Pavel Mogilnikov <pmogilnikov@cloudlinux.com>, Pavel <pmogilnikov@cloudlinux.com> 3.1.5-1

changelog:
  - LU-2388: Fix hidepid behaviour on CL8
  - LU-2424 : Add edition field to sentry logging
  - LU-2381 : catch and ignore NoSuchProcess


changelog: - LU-2440: Add nginx webserver detection to statistics
author:
  Dmitry Shibut <dshibut@cloudlinux.com>, Hasan <haliev@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 3.1.6-1


author: Dasha Kavchuk <dkavchuk@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> 3.1.7-2
changelog:
  - XRAY-201: added warnings about external usage in docstrings
  - LU-2592 Change default detection type of CL Solo edition


author:
  alutsiuk <alutsiuk@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 3.1.9-1

changelog:
  - LU-2606 Calculate number of WP sites with object-cache.php/advanced-cache.php enabled
  - PTCLLIB-229: TypeError could be raised in get_cl_version function
  - LU-2249: Create internal doc on how to update/extend CPAPI
  - LU-2479: implement handling of WPOS icon visibility for CL Solo


author: Pavel Negrobov <pnegrobov@cloudlinux.com>, Aleksey Zverev <azverev@cloudlinux.com> 3.2.2-1
changelog:
  - LU-2664: Improve user reload process in CLWPOS daemon
  - PTCLLIB-231: Provide the method to detect number of hosting accounts for Solo and CPanel
  - LU-2726: Handled UnicodeUnicodeDecodeError in is_advanced_cache_enabled()


author: Anastasia Lutsiuk <alutsiuk@cloudlinux.com>, Hasan Aliyev <haliev@cloudlinux.com> 3.2.3-1
changelog:
  - LU-2722 Detect CL ROC is enabled
  - LU-2723 Detect Wp-Rocket in cloudlinux-summary
  - PTCLLIB-232: Provide the method to detect number of hosting accounts for Solo and DirectAdmin


author: Dmitry Shibut <dshibut@cloudlinux.com>, Hasan Aliyev <haliev@cloudlinux.com> 3.2.4-1
changelog:
  - LU-2740: Check why -42 responses still present in our stats
  - LU-2686: collect statistics of used php versions for customer's WP sites


author: alutsiuk <alutsiuk@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com> 3.2.10-1
changelog:
  - LU-2800 Provide the way to detect Litespeed on user level
  - LVES-1051: Add the ability to read the password in single quotes from /etc/my.cnf for SnapshotSaver
  - CLOSD-52: implement WPOS for CL Shared Pro


author:
  alutsiuk <alutsiuk@cloudlinux.com>, Hasan <haliev@cloudlinux.com>, ikartavtcev <ikartavtcev@cloudlinux.com> 3.2.13-1

changelog:
  - PTCLLIB-234: Avoid getting all user domains on DA with --DocumentRoot option
  - LU-2857 Collecting statistics fails due to OSError: [Errno 5] Input/output error
  - lu-2906: Fix WposModifyUserHook to work on Solo


author:
  alutsiuk <alutsiuk@cloudlinux.com>, Hasan <haliev@cloudlinux.com>, ikartavtcev <ikartavtcev@cloudlinux.com> 3.2.13-1

changelog:
  - PTCLLIB-234: Avoid getting all user domains on DA with --DocumentRoot option
  - LU-2857: Collecting statistics fails due to OSError: [Errno 5] Input/output error
  - LU-2906: Fix WposModifyUserHook to work on Solo


author:
  Anton Volkov <avolkov@cloudlinux.com>, Konstantin Vaskovtsov <derkonstantin@cloudlinux.com>, Igor Savenko <bliss@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com> - 1-8

changelog:
  - Add support for CageFS to clsudo
  - add isRoot, getUserPwd functions to common libraries
  - clsudo.py: add ability to update paths in /etc/sudoers file


author: Anton Volkov <avolkov@cloudlinux.com>, Konstantin Vaskovtsov <derkonstantin@cloudlinux.com> - 1-10
changelog:
  - PTCLLIB-5: clpwd.py: add ability to get full passwd database (including entries with uid < min_uid)
  - add validate int function
  - clfunc.py: catch ValueError in memory_to_page function


author: Igor Savenko <bliss@cloudlinux.com> - 1-12
changelog:
  - clsudo.py: removed strict 's' option from ones passed to visudo because of problems on CL5 systems


author: Anton Volkov <avolkov@cloudlinux.com>, Alexander Grynchuk <agrynchuk@gmail.com> 1-14
changelog:
  - PTCLLIB-9: Add clconfpars (for parsing simple cofig files "key=val")
  - PTCLLIB-8: clfunc.py: added reload_processes() function


author:
  Igor Seletskiy <iseletsk@cloudlinux.com>, Alexander Grynchuk <agrynchuk@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com> 1.1-0

changelog:
  - Added ability to save changes to config files
  - Added ability to read config in case sensitive form
  - PTCLLIB-18: Write a universal api for working with control panels. Render commonly used functions in python-cllib
  - PTCLLIB-17 fix: Add class for logging


author: Alexander Grynchuk <agrynchuk@cloudlinux.com> 1.1-1
changelog:
  - PTCLLIB-18: Write a universal api for working with control panels. Render commonly used functions in python-cllib.


author: Alexander Grynchuk <agrynchuk@cloudlinux.com> 1.1-3
changelog:
  - PTCLLIB-21 - Add the ability to attach custom plugins for CloudLinux control panel api (clcommon.cpapi)


author: Konstantin Vaskovtsov <derkonstantin@cloudlinux.com>, M Zhbankov <mzhbankov@cloudlinux.com> 1.2-12
changelog:
  - LU-172: add handling of LVE version 9 part2
  - PTCLLIB - 29: add API for getting domains data (DirectAdmin)
  - LU-172: add handling of LVE version 9
  - PTCLLIB-54:Move cllimits/mysql_governor_lib.py from LU to PTCLLIB
  - PTCLLIB-52: generate unit tests coverage information while building rpm


author: Huz Dmytro <dhyz@cloudlinux.com>, Mike Zhbankov <mzhbankov@cloudlinux.com> 1.2-14
changelog:
  - PTCLLIB-56:Add methods for set governor parameters
  - PTCLLIB-53: Add the permission In /etc/sudoers to run /usr/bin/selectorctl


author:
  Pavel Negrobov <pnegrobov@cloudlinux.com>, Pavel Vavilin <pvavilin@cloudlinux.com>, Vladimir Prokofev <vprokofev@cloudlinux.com> 1.2-15

changelog:
  - PTCLLIB-63: Add the permission to /etc/sudoers to run /usr/sbin/cloudlinux-limits
  - PTCCLLIB-46: Improve 'with_system_users' parameter in clcpapi functions, added unit tests
  - OPCACHE-13 Auto home dirs detection for cPanel/DA/Plesk
  - PTCLLIB-61: Add ability to get username/uid by domain name in cPanel
  - PTCLLIB-59: Add ability to get username/uid by domain name on DA
  - PTCLLIB-60: Add ability to get username/uid by domain name [Plesk]


author: Anton Volkov <avolkov@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com> 1.2-16
changelog:
  - PTCLLIB-66: Add the permission to /etc/sudoers to run /usr/share/l.v.e-manager/utils/cloudlinux-cli.py
  - PTCLLIB-67: add load_once function ("cached" load function) to clconfpars module
  - PTCLLIB-65: Fix lvemanager on DA adding !requiretty for clsudoers group


author: Anton Volkov <avolkov@cloudlinux.com>, Pavel Vavilin <pvavilin@cloudlinux.com> 1.2-17
changelog:
  - PTCLLIB-70: add handling of OSError exception to reload_processes function
  - PTCLLIB-68: do not add cloudlinux-limits to /etc/sudoers


author: Anton Volkov <avolkov@cloudlinux.com>, Pavel Vavilin <pvavilin@cloudlinux.com> 1.2-19
changelog:
  - CAG-574: change error messages of cagefsctl so it will not affect migration CL servers to EA4
  - LU-228: Add to cloudlinux-limits support dbctl


author: Pavel Negrobov <pnegrobov@cloudlinux.com>, Pavel Vavilin <pvavilin@cloudlinux.com> 1.2-20
changelog:
  - LVEMAN-786: investigate how to optimize selectorctl update-interpreter process
  - PTCLLIB-49: Add ability to determine ISPManager 5 Business to Python-cllib


author: Anton Volkov <avolkov@cloudlinux.com>, Vladimir Prokofev <vprokofev@cloudlinux.com> 1.2-23
changelog:
  - CAG-593: Fix CageFS functionality on CloudLinux 7 if postgresql installed
  - PTCLLIB-73: httpd24-alt-mod-passenger not registered in cagefs.mp when installed


author:
  Alexander Grynchuk <agrynchuk@cloudlinux.com>, Sergei Chernikov <schernikov@cloudlinux.com>, Stas Django <pythonpowerd@gmail.com> 1.2-39

changelog:
  - PTCLLIB-86 - Fix TypeError when trying to get user domains on DA
  - LU-364 Few Mysql governor api calls now returns 0 on success
  - PTCLLIB-83 Plugin detection results now cached only for third-party plugins Replace dangerous exec() with import_module() for plugin loading
  - PTCLLIB-85: Fix ValueError when retrieving user io limit and it is less than 1mb/s


author:
  Anton Volkov <avolkov@cloudlinux.com>, Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Alexander Grynchuk <agrynchuk@cloudlinux.com> 1.2-45

changelog:
  - LVEMAN-1091: Investigate selectorctl high memory consumption
  - LVES-728: Optimize plugins. lvestat.LVEStat
  - LVES-717 - Add is_reseller function to cllib (cpapi)
  - LVES-707 - Make function reseller_users working from a reseller account in DirectAdmin
  - PTCLLIB-88 - Correct handling /etc/container/mysql-governor.xml with reseller rights
  - LVES-714 Make cllib compatibility with lve 1.5
  - LVES-645 - Add to cpapi new feature for obtain users of a reseller (part 2)
  - LU-365: Print mysql-io limit in Kbytes per second in cllimits utility


author:
  Konstantin Vaskovtsov <derkonstantin@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com>, Stas Django <pythonpowerd@gmail.com> 1.2-47

changelog:
  - PTCLLIB-91: Add DB access params extract for ISP5 to ispmanager.py
  - LU-402 Small workaround for old Governor to prevent dropping to defaults when setting 1MB limits
  - LU-402 Fixed: Incorrect value of mysql-io after set to 1MB Now we pass IO limits to dbctl as bytes if Governor support this
  - LVEMAN-1102: optimize selectorctl --update-interpreter


author:
  Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com>, Stas Django <pythonpowerd@gmail.com> 1.2-49

changelog:
  - LU-411: Process dbctl stderr messages in cloudlinux-limits
  - LVES-751: Add nginx support for DirectAdmin cpapi
  - LVEMAN-1107 Call "lvectl sync-map" in cPanel acct hooks and indirectly via cron


author:
  Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com> 1.2-50

changelog:
  - LVES-758: Add support collecting resellers statistics
  - LVEMAN-1119: Fix error in DA GUI: sudo: no tty present and no askpass program specified


changelog:
  - LU-227: Add detection EA4 to cldetect
  - LU-329: make prospector more usefull

author:
  Pavel Negrobov <pnegrobov@cloudlinux.com>, Anton Volkov <avolkov@cloudlinux.com>, Pavel Vavilin <pvavilin@cloudlinux.com> 1.2-56


author:
  Konstantin Vaskovtsov <derkonstantin@cloudlinux.com>, Sergei Chernikov <schernikov@cloudlinux.com> 1.2-59

changelog:
  - LU-493: Fix trace in lvectl all-package-list after 0% after creating package  with cPanel tools
  - PTCLLIB-97 - Add conflict with lve-stats < 2.7-7
  - LVES-821: Optimize reading of /proc/lve/list


author:
  Pavel Negrobov <pnegrobov@cloudlinux.com>, Stepan Oksanichenko <soksanichenko@cloudlinux.com> 1.2-72

changelog:
  - LU-535: Fix functions reseller_users from cpapi and reseller_uids from lveapi
  - PTCLLIB-100: cloudlinux-limits should recognize cPanel reseller with name shoter then 3 symbols


author:
  Pavel Negrobov <pnegrobov@cloudlinux.com>, schernikov <schernikov@cloudlinux.com>, Stepan Oksanichenko <soksanichenko@cloudlinux.com> 1.2-78

changelog:
  - PTCLLIB-102: Optimize function time execute `clcommon.utils.grep`
  - LVEMAN-1179: Add human-readable errors on conf check failure
  - LVES-748: Drop LVE 4 compatibility


author:
  Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Konstantin Vaskovtsov <derkonstantin@cloudlinux.com> 1.2-82

changelog:
  - PTCLLIB-103: Fix cpinfo behavior on plesk
  - PTCLLIB-106: UnboundLocalError in apache config parser


author:
  Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Stepan Oksanichenko <soksanichenko@cloudlinux.com> 1.4-1

changelog:
  - PTCLLIB-112: Fix traceback in safely_resolve_username_and_doc_root if user is absent
  - LVES-844: Implement resellers limits to lvectl for DA
  - PTCLLIB-109: Fix cpapi behavior on DirectAdmin
  - PTCLLIB-105: Main domain must be first in 'userdomains' result (plesk)
  - LVES-818: Implement reseller limits to lvectl for Plesk
  - LU-618: ensure that NodeJS application is workable after changing version or modules. Part II
  - LVES-873: Fix memory leak
  - LU-618: ensure that NodeJS application is workable after changing version or modules
  - PTCLLIB-111 Fix missing files on filesystem that are listed in %files section
  - PTCLLIB-108: add lvectl delete to prekill hook in panel_hooks_lib.py
  - LVES-770: cloudlinux-top doesn't work on plesk with reseller
  - LU-598: Fix traceback after run "lvectl sync-map" on no-panel Cloudlinux server
  - LU-448: Implement resellers method on plesk


author:
  Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Anton Volkov <avolkov@cloudlinux.com>, Egor Zvorykin <ezvorykin@cloudlinux.com> 1.4-2

changelog:
  - CAG-797: mount NodeJS Selector config directory into CageFS
  - CAG-796: use hidepid=2 when mounting /proc
  - LU-631: Keep reseller lve-id to avoid issues with statistics on Plesk
  - LVEMAN-1216: update node-selector.json file safely
  - LVEMAN-1210: recreate CRIU images when changing PHP version, extensions or options


author:
  Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Anton Volkov <avolkov@cloudlinux.com>, Stepan Oksanichenko <soksanichenko@cloudlinux.com>, Egor Zvorykin <ezvorykin@cloudlinux.com> 1.4-4

changelog:
  - LVEMAN-1216: update node-selector.json file safely, part IV
  - LVEMAN-1253: Investigate problem with access to `/usr/local/directadmin/conf/directadmin.conf` file under user
  - PTCLLIB-110: Drop users information cache, take info directly from panel


author:
  Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, schernikov <schernikov@cloudlinux.com>, Stepan Oksanichenko <soksanichenko@cloudlinux.com> 1.4-5

changelog:
  - PTCLLIB-110: Drop users information cache, take info directly from panel
  - LU-697: Fix cloudlinux-selector output if user's main domain was changed
  - LVES-885 - Hide DA admin accounts in cloudlinux-top|statistics


author:
  Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Anton Volkov <avolkov@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com> 1.4-8

changelog:
  - PTCLLIB-117: Rework DA cpapi plugin accoding to DA improvements
  - PTCLLIB-116: method for unmount dir in cagefs.mp
  - LU-735: Add ability to use additional domains in DirectAdmin for create NodeJS applications
  - LU-737: remount_proc.py should not ignore fs.proc_super_gid in /etc/sysctl.d/* files
  - LU-732: Fix subdomains in hook for changing main domain


author:
  Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Vladislav Yakushenko <vyakushenko@cloudlinux.com> 1.4-9

changelog:
  - PTCLLIB-119: show human-readable exception when mysql-governor config is malformed
  - LU-725: Prettify unicode returned with "app_uri" key for NodeJS selector


author:
  Stanislav Sergiienko <ssergiienko@cloudlinux.com>, Vladislav Yakushenko <vyakushenko@cloudlinux.com> 1.4-10

changelog:
  - LU-775: Ignore stderr when calling whmapi1 & uapi
  - LU-762: Fix cPanel postmodifyacct: No such file or directory: '/var/lve/tmp/USERNAME'


author:
  Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Konstantin Vaskovtsov <derkonstantin@cloudlinux.com> 1.4-11

changelog:
  - LVES-907: Fix displaying of "N/A" instead of domain on Plesk.
  - Move mail_helper from lve-stats 2
  - LU-771: Prettify unicode returned with "Application startup file" key for NodeJS selector


author:
  Konstantin Vaskovtsov <derkonstantin@cloudlinux.com>, Stepan Oksanichenko <soksanichenko@cloudlinux.com> 1.4-12

changelog:
  - PTCLLIB-125: cllib utils.grep() works incorrectly and give wrong results in many places (e.g. DA package confusion)
  - LU-633: notify users when admin has changed version for their applications part 2: move mail helper from lve-stats2 to python-cllib add basic config for logging


author:
  Anton Volkov <avolkov@cloudlinux.com>, Konstantin Vaskovtsov <derkonstantin@cloudlinux.com>, Stepan Oksanichenko <soksanichenko@cloudlinux.com> 1.4-13

changelog:
  - PTCLLIB-128: lvectl sync-map crashing when empty string present in user conf. skip broken and empty lines in config
  - LU-753: our code should process /etc/sysctl.d/* files along with /etc/sysctl.conf


author:
  Stepan Oksanichenko <soksanichenko@cloudlinux.com>, Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 1.4-14.1

changelog:
  - LU-863: implement collecting system information for CL Usage
  - LU-866: add drop_privileges contextmanager to allow temporary drop privileges
  - LU-853: Make an exclude for /var/cpanel/users/system. Part II. (merged)
  - PTCLLIB-131: Remove get_governor_version error messages from stdout
  - LU-853: Make an exclude for /var/cpanel/users/system


author:
  Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Egor Zvorykin <ezvorykin@cloudlinux.com>, Konstantin Vaskovtsov <derkonstantin@cloudlinux.com>, Stepan Oksanichenko <soksanichenko@cloudlinux.com> 1.4-14.2

changelog:
  - LVEMAN-1360: Implement method that return list of domains that are affected by our php selector (cPanel)
  - LVEMAN-1362: Implement method that return list of domains that are affected by our php selector (Plesk)
  - LVEMAN-1363: Implement method that return list of domains that are affected by our php selector (DirectAdmin)
  - LU-938: Fix tests/utils with new cPanel 76


author:
  Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Egor Zvorykin <ezvorykin@cloudlinux.com>, Konstantin Vaskovtsov <derkonstantin@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com>, Stepan Oksanichenko <soksanichenko@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, schernikov <schernikov@cloudlinux.com> 1.5-1

changelog:
  - LU-1110: Fix fail during  collecting php domains statistics on da
  - LU-1070 Detect LiteSpeed in Wizard
  - LU-1023 Replace hardcoded list of php/python/ruby/nodejs interpreters and use groups for installation
  - PTCLLIB-143: Use full path for sysctl call in cldiag
  - LVEMAN-1374: Functional tests for PHP selector domains statistics (Plesk)
  - LVES-880 Fix issue with Username = N/A for reseller with disabled reseller limits on the Statistics tab
  - LVES-927: Fix issue with sending of localized templates for admin/reseller
  - LU-610: Add ability to integrate reseller limits to any control panel


author:
  Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, dkulazhenko <dkulazhenko@cloudlinux.com> 1.5.1-1

changelog:
  - LU-1132: Fix conditions for python and ruby selector to be enabled on dashboard
  - LU-1151: Fix mysql restrict functionality via cloudlinux-limits utility
  - PTCLLIB-146: Fix error message when governor is down


author: alutsiuk <alutsiuk@cloudlinux.com> 1.5.3-1
changelog:
  - LU-1148: Fix PHP handler data collection for cloudlinux-summary when binaries are broken
  - LU-1196 cldiag "Check fs.enforce_symlinksifowner" failed with internal error


author: dkulazhenko <dkulazhenko@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> 1.5.4-1
changelog:
  - LU-1198: Fix json errors when getting remote available groups info (part-2)
  - LU-1134 Fix CPAPIExternalProgramFailed exception in cloudlinux statistics when PHP is not installed
  - LU-1198: Fix json errors when getting remote available groups info


author: Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Anton Volkov <avolkov@cloudlinux.com> 1.5.6-1
changelog:
  - PTCLLIB-150: implement get_admin_locale method for panels other than cPanel
  - LVES-956: html notifications are not sent when locale is not en_US


author: Simba <dpoleev@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> 1.5.8-1
changelog:
  - LVEMAN-1497 Automatically generate requirements file with extensions upon importing legacy apps
  - WEB-1515: Ignore not utf-8 characters in /etc/cl.selector/php.conf


author:
  Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com>, Simba <dpoleev@cloudlinux.com> 1.5.9-1

changelog:
  - WEB-1498: Show INODES in resource usage
  - LU-1334: Users were missing in LVE manager users tab
  - LU-1324: handle postmodifyacct_main for python selector


author:
  Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Stepan Oksanichenko <soksanichenko@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com>, Dmitriy Poleev <dpoleev@cloudlinux.com>, Sergey Kozhekin <skozhekin@cloudlinux.com> 1.5.11-1

changelog:
  - LVES-961: Cloudlinux top from user throws sentry error to output
  - PTCLLIB-155: Move cllib bundled hooks to the path not depending on python version
  - SonarQube python-cllib ger_ev
  - PTCLLIB-154: remove hooks from control panel during downgrade
  - CAG-949: Move dummy hooks to cllib and install plesk&da&cpanel proxies
  - LU-1340: Create public hooks system for 3dparty control panels
  - LU-1367: Run lve-utils rpm tests on real Panels(cPanel/Plesk)
  - LU-1341: Replace using of `too long script` by using of cpapi
  - LVEMAN-1557: Make use of new PassengerAppLogFile directive in our selectors


author:
  Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com>, Sergey Kozhekin <skozhekin@cloudlinux.com>, Stepan Oksanichenko <soksanichenko@cloudlinux.com>, Ulugbek Samigjonov <usamigjonov@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>  1.5.12-2

changelog:
  - CAG-945: Cleanup cllib package from no longer used methods
  - CAG-945: Move sync-map hooks to lve-utils
  - CAG-945: Rename new_vendor -> new_owner in modify_user callbacks
  - CAG-945: Rewrite `py/node selector` hooks to new universal hooks system
  - CAG-945: unify is_root_or_exit in order to work with all control panels
  - Fix problems with detecting vendors control panel name under user
  - LU-1368: Cover cPanel with CPAPI tests
  - LU-1389: Do not use rpm -q in passenger and virtualenv detecting
  - LU-1390 Improve panels detection for statistics
  - LU-1552: Fix cpapirebuildcache after adding vendors cpapi proxy
  - LVEMAN-1552: Add debug logging about cpapi calls and their duration
  - LVEMAN-1552: Final implementation of CPAPI based on PoC
  - LVEMAN-1587: Change is_main filter argument value to lowercase
  - PTCCLIB-161: Method `cpapi.userdomains` doesn't work correct on Plesk
  - PTCLLIB-153: Improve plesk hooks install code to log errors to sentry
  - PTCLLIB-153: Move clsentry package to cllib
  - PTCLLIB-153: Use sentry in python-cllib package
  - SonarQube python-cllib add <c-checkers>
  - Temporary revert debug logging about cpapi calls and their duration
  - WEB-1580: Add ability to hide inodes in Plesk and DirectAdmin
  - WEB-1592: Do not show inode accordion if quota unavailable
  - CAG-965: Cleanup package from no longer used methods and hooks
  - CAG-965: Move user creation logic to universal lib
  - CAG-965: Move user_restore logic to universal lib
  - CAG-965: Move cagefs_plesk_hs_deleted and terminate_cagefs_account logic to universal lib


author:
  Stepan Oksanichenko <soksanichenko@cloudlinux.com>, Ulugbek Samigjonov <usamigjonov@cloudlinux.com> 1.6.1-1

changelog:
  - Added using unicode user names as filter in function cpinfo of vendor cpapi plugin.
  - LU-1463: ValueError: invalid literal for int() with base 10: '--help'
  - PTCLLIB-171: Fix backward plugin's methods `_cpinfo` and `list_users`
  - WEB-1593: Use the same names for options in config file as it return cl_config
  - WEB-1594: Use new config file to store php selector status in plesk


author: Stepan Oksanichenko <soksanichenko@cloudlinux.com> 1.6.3-1
changelog:
  - Bump version for master branch 1.6.2-1
  - LU-1463: ValueError: invalid literal for int() with base 10: '--help'. Part II


author: Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 1.6.4-1
changelog:
  - CAG-965: Change pre delete with post delete admin
  - PTCLLIB-154: disable sentry only for downgrade


author:
  Anton Volkov <avolkov@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 1.6.5-1

changelog:
  - PTCLLIB-174: Add detailed logging about what happens in hooks
  - PTCLLIB-174: Use logrotate instead of RotatingFileHandler
  - PTCLLIB-174: Fix post_modify_domain hook for case when user and domain changed together
  - PTCLLIB-173: Return json response for universal hooks on cpanel
  - PTCLLIB-177 Install cpanel hooks even if hooks.yaml is missing
  - PTCLLIB-176 Investigate and fix failed hook tests on DA
  - LU-1487: replace alt-python27-MySQL-python with alt-python27-MySQL-meta in all spec files


author: Ulugbek <usamigjonov@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com> 1.6.6-1
changelog:
  - WEB-1658: Admin can not use "User interface settings"
  - PTCLLIB-175: Build alt-python27-cllib package for CL8


author:
  Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Anton Volkov <avolkov@cloudlinux.com>, Pavel Mogilnikov <pmogilnikov@cloudlinux.com> 1.6.8-1

changelog:
  - LU-1422: DA cpapi.userdomains with admins
  - CAG-1001: Don't copy etc during postwwwacct while restoring account
  - PTCLLIB-179 : (Stage 2) Safe fixes of futurize
  - PTCLLIB-179 : Stage 1 all imports
  - PTCLLIB-179 : Stage 1 of futurize
  - PTCLLIB-179 : Fix unittests behaviour
  - PTCLLIB-179 : fix reload_processes function
  - PTCLLIB-179 : Replace assert(Not)Eqals with assert(Not)Equal
  - Sonar Qube: disable rules related to unused imports and imports ordering


author:
  Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, Anton Volkov <avolkov@cloudlinux.com>, pmogilnikov <pmogilnikov@cloudlinux.com> 2.0.8-3

changelog:
  - CAG-1027: Fix pickle incompatibility between python2 and python3
  - LU-1630 : usage of os.makedirs on py3
  - LU-1646 Fix cl-wizard on cl7h
  - LU-1641: investigate issues with CL8 installation into empty chroot (ISO install)
  - PTCLLIB-195: Fix NoneType Traceback with whmapi call on CPanel 86.0
  - PTCLLIB-183: rewrite pretrans using lua
  - PTCLLIB-193: fix issues with upgrade and downgrade of alt-python-cllib package
  - CAG-1014: Investigate failed test 958-list-mounted-users on DA
  - PTCLLIB-182: Fix hooks installation on cpanel 84+
  - LVEMAN-1636 fix sendmail subprocess error
  - LU-1583 enable pylint py3k for cllib
  - LU-1607 : (python-cllib) add interpolation=None
  - LU-1589: Fix wizard errors on CL8
  - PTCLLIB-191 : Fix unittests
  - LU-1501: Add manual pyc pyo build for cllib
  - LVES-968 make possible to get raw subprocess from run_command
  - PTCLLIB-186: Make db_info optional, as mentioned in docs
  - PTCLLIB-185: Fix admins sync when admin does not have system user
  - PTCLLIB-183: rewrite pretrans using lua
  - PTCLLIB-184 : Fix directadmin cpapi tests
  - add text=True to clcaptain
  - LU-1492: use text=True for subprocess while installing cpanel hooks
  - LU-1492: Write errors in case of bad cpanel configs
  - LU-1492: Make hooks installation work on plesk
  - minor fixes to cllib to work on py3
  - LU-1492: Remove byteify usage from cpapi plugins
  - PTCLLIB-179: use text=True in all subprocess calls
  - LU-1566 add -bb option to cllib
  - PTCLLIB-179: remove multiple imports on single lines
  - PTCLLIB-179 : fix cpapi plugins plesk users encoding
  - PTCLLIB-179 : fix vendors_api
  - PTCLLIB-179 : (Fixes) Stage 2 of futurize
  - PTCLLIB-179 : (Nobuild) Stage 2 of futurize
  - LU-1500: update spec and shebangs for python3
  - PTCLLIB-179 : (Stage 2) Safe fixes of futurize
  - PTCLLIB-179 : Fix unittests behaviour
  - PTCLLIB-179: Use bytes when parsing php_conf config
  - PTCLLIB-179 : fix reload_processes function
  - PTCLLIB-179 : Replace deprecated NoneType
  - PTCLLIB-179 : Replace __builtin__ imports with builtins
  - PTCLLIB-179 : Replace deprecated assertItemsEqual with assertCountEqual
  - PTCLLIB-179 : Replace assert(Not)Eqals with assert(Not)Equal
  - Sonar Qube: disable rules related to unused imports and imports ordering
  - LU-1500: Version up
  - PTCLLIB-175: Build alt-python27-cllib package for CL8
  - LU-1500: Add commented pylint --py3k
  - LU-1500: create master-py3 branch


author:
  Dmitriy Poleev <dpoleev@cloudlinux.com>, msozin <msozin@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> 2.0.11-1

changelog:
  - WEB-1823: PHP Selector small fixes
  - PTCLLIB-192: Implement new folder-based hooks installation mechanism on DA
  - PTCLLIB-199 Investigate why pre_delete_hooks fails on cpanel
  - WEB-1783: Implement logic about disable Domain tab for user


author:
  Aleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, Stepan Oksanichenko <soksanichenko@cloudlinux.com> 2.1.1-1

changelog:
  - PTCLLIB-208: Bug in cagefs7 at ispmanager_create_user_wrapper_detect_php_ver function in /usr/share/cagefs/cagefs_ispmanager_lib.py
  - LU-1718 Make configparser less strict and ignore duplicated options in configs
  - LU-1693: Configure sonarcube for all our projects
  - LVES-991: HTTP requests are not included into the Snapshots saved by SnapshotSaver
  - LU-1372: Add ability for vendor to list supported CL components
  - LU-1693: Configure sonarcube for all our projects
  - LU-1283: create dependency for lve-utils package
  - LU-1684: Add possibility to install lsapi via wizard on DirectAdmin from beta. Part II
  - Add text=True to subprocess in vendors_api.parser


author: alutsiuk <alutsiuk@cloudlinux.com>, Anton Volkov <avolkov@cloudlinux.com> 2.1.2-1
changelog:
  - PTCLLIB-209: fix error in pretrans scriplet while installing CL7.8 from ISO image
  - LVES-996 Add method for getting aliases on Plesk and DA


author: alutsiuk <alutsiuk@cloudlinux.com> 2.1.4-1
changelog:
  - LU-1792: The new version of the lve-utils package is not compatible with the old version of cPanel
  - PTCLLIB-211: [Sentry] Subprocess in get_rpm_db_errors doesn`t have text=True


author: Stepan Oksanichenko <soksanichenko@cloudlinux.com> 2.1.5-1
changelog:
  - PTCLLIB-212: [Sentry] Fix `IndexError: string index out of range` in function of serialazing EVR
  - PTCLLIB-213: Add method `get_supported_cl_features` for ISP cpapi plugin


author: alutsiuk <alutsiuk@cloudlinux.com>, Anton Volkov <avolkov@cloudlinux.com> 2.1.7-1
changelog:
  - CMT-126 fix systemid xml parsing
  - PTCLLIB-216: fix spec - alt-python27-cllib does not build in CL8


author:
  Alisher Matkurbanov <amatkurbanov@cloudlinux.com>, msozin <msozin@cloudlinux.com>, Stepan Oksanichenko <soksanichenko@cloudlinux.com> 2.1.8-1

changelog:
  - LU-1883: Fix load_fast failure for non-utf8 chars in config
  - LVEMAN-1683: Escape formatting characters (%) inside exception message.
  - CAG-1062: [CL8.2] Mount socket of systemd-journal into CageFS
  - LU-1865: Add activate/deactivate mechanism for Endserver-tools


author:
  dkuropiatnyk <dkuropiatnyk@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com>, soksanichenko <soksanichenko@cloudlinux.com> 2.1.13-1

changelog:
  - LVES-1009: Add CM plugin for lve-stats2
  - LU-1881: Add a few metrics to CL statistics
  - CMT-221: Add package versions tags to sentry


author:
  Pavel Negrobov <pnegrobov@cloudlinux.com>, soksanichenko <soksanichenko@cloudlinux.com>, dkuropiatnyk <dkuropiatnyk@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> 2.2.0-1

changelog:
  - CMT-165: [End-server tools] Adapt CM apache collector to DA
  - CMT-257: Add to cldiag the base checks for CMT. Part II
  - CMT-257: Add to cldiag the base checks for CMT
  - PTCLLIB-217: docroot() is broken on directadmin
  - CMT-417 UnicodeDecodeError: `utf-8` codec can`t decode byte 0xe4 in position 3167: invalid continuation byte


author:
  Pavel Mogilnikov <pmogilnikov@cloudlinux.com>, Stepan Oksanichenko <soksanichenko@cloudlinux.com> 2.2.2-1

changelog:
  - CMT-257: Add to cldiag the base checks for CMT. Hot-fix for non-CL+ clients
  - LVEMAN-1695 : Change sentry init function


author:
  Alisher Matkurbanov <amatkurbanov@cloudlinux.com>, Danylo Kuropiatnyk <dkuropiatnyk@cloudlinux.com>, Stepan Oksanichenko <soksanichenko@cloudlinux.com> 2.2.7-1

changelog:
  - CMT-494: Reduce amount of sentry errors
  - LU-2020: Add get_weekday function and WEEK_DAYS tuple
  - PTCLLIB-218 : Fix userdomains for DirectAdmin and openlitespeed
  - LU-2016: Do not perform checking patches for "suexec" with LiteSpeed server
  - CMT-257: Add to cldiag the base checks for CMT


author: Danylo Kuropiatnyk <dkuropiatnyk@cloudlinux.com>, Dmitriy Poleev <dpoleev@cloudlinux.com> 2.2.9-1
changelog:
  - WEB-2040: Add config parameters for cl-config: Hide X-Ray for user
  - PTCLLIB-220: CLDIAG doesn't correctly check the services in non-English locales
  - CMT-386: Adapt CM end-server-tools apache collector for Plesk


author:
  Danylo Kuropiatnyk <dkuropiatnyk@cloudlinux.com>, Alisher Matkurbanov <amatkurbanov@cloudlinux.com> 2.2.10-1

changelog:
  - CMT-528: Error while getting Mysql Governor limits: Governor not present in system (CL+CM_Collector)
  - LU-2081: Fix unclosed resource warning


author: Roman Krompets <rkrompets@cloudlinux.com>, Pavel Mogilnikov <pmogilnikov@cloudlinux.com> 2.2.13-3
changelog:
  - WEB-2113: Implement installation of end-user xray plugin on custom panel
  - PTCLLIB-219 : Fix vendors plugin for users without packages


author:
  Pavel Negrobov <pnegrobov@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Hasan <haliev@cloudlinux.com> 2.2.18-1

changelog:
  - LU-2291: Fix cl-limits set mysql governor to plesk users with additional accounts
  - PTCLLIB-221: Make vendors_api importable directly


author:
  Pavel <pmogilnikov@cloudlinux.com>, Hasan <haliev@cloudlinux.com>, Dasha Kavchuk <dkavchuk@cloudlinux.com> 3.1.1-1

changelog:
  - PTCLLIB-224: Fix conflicts lve-utils/cllib
  - LU-2373: public methods for detection editions added
  - LU-2352: Renew cl single detection by marker logic according to spec
  - CMT-555: Use traceroute -I or -T for tracing to cm.cloudlinux.com
  - LU-2306: make x-ray enabled by default on CloudLinux Solo
  - LU-2226: implement cloudlinux edition checker


author:
  alutsiuk <alutsiuk@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Pavel Negrobov <pnegrobov@cloudlinux.com> 3.1.3-2

changelog:
  - LU-2388: Fix hidepid behaviour on CL8
  - LVES-1036: get Swedish characters to work in non-HTML notifications
  - LU-2354: Split liblve.so into liblve and libsecureio


author: Pavel Negrobov <pnegrobov@cloudlinux.com>, Dasha Kavchuk <dkavchuk@cloudlinux.com> 3.2.26-1
changelog:
  - AWP-122: Skip broken document roots while scanning for WordPress sites
  - PTCLLIB-244: Fix LiteSpeed detection under user


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 3.2.27-1
changelog:
  - CLPRO-133: Disable reseller limits and governor for CloudLinux Admin
  - CLPRO-131: Added CloudLinux OS Admin detection


author: Ilya Kartavtcev <ikartavtcev@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com> 3.2.29-1
changelog:
  - LU-3374: Fix lve limits reset on package rename on Plesk
  - PTCLLIB-246: Fix wrong mountpoint detection for quota status check


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 3.2.30-1
changelog:
  - CLPRO-136: Added ability to detect container environment
  - CLPRO-136: Remove unneeded features from container edition


author: Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 3.2.30-1
changelog:
  - CLPRO-136: Added ability to detect VZ container environment
  - CLPRO-136: Remove unneeded features from VZ container edition


author: Dmitry Shibut <dshibut@cloudlinux.com>, Ilya Kartavtcev <ikartavtcev@cloudlinux.com> 3.2.33-1
changelog:
  - LU-3527: fixed false-negative lve feature support detection
  - LVEMAN-1867: Fix incorrect panel detection on DirectAdmin


author: alutsiuk <alutsiuk@cloudlinux.com>, Daria Kavchuk <dkavchuk@cloudlinux.com> 3.2.34-1
changelog:
  - XRAY-666: Extend cpapi with getting user emails
  - CLPRO-169: detection of CL Shared Pro edition fixed


author: Pavel Negrobov <pnegrobov@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com> 3.2.36-1
changelog:
  - CAG-1224: Make CageFS work on CL Solo
  - LU-3513: Create interface for working with Package Limits of Governor


author: Pavel Negrobov <pnegrobov@cloudlinux.com> 3.2.39-1
changelog:
  - LU-3584: Adapt cloudlinux-limits and cloudlinux-packages to new governor
  - LU-3560: Fix governor limits work on reseller packages
  - LU-3551: Optimize cloudlinux-packages utility for Governor Packages Limits


author: Dmitry Shibut <dshibut@cloudlinux.com>, Dasha Kavchuk <dkavchuk@cloudlinux.com> 3.2.40-1
changelog:
  - LU-3588: Allow cloudlinux-wizard to install cagefs and alt-php on Solo
  - AWP-260: Provide an ability to get user's domains and document roots for Plesk
  - LVEMAN-1870: Make PHP Selector work on CL Solo
  - LVEMAN-1869: Add Governor limits to cPanel LVE Extension


author:
  Pavel Negrobov <pnegrobov@cloudlinux.com>, Anton Volkov <avolkov@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 3.2.43-1

changelog:
  - LVES-1087: Detect root user coorectly when multiple users with uid 0 exist
  - AWP-326: make cpusers and cpinfo results consistent
  - LVEMAN-1862: PHP version should not reset to default version when adding FTP account on plesk


author:
  Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Grigory Ponomarenko <gponomarenko@cloudlinux.com>, Mariia Mozgunova <mmozgunova@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com> 3.2.44-1

changelog:
  - LU-3652: Improve integration API security
  - PTCLLIB-242: Optimize retriving admin list in /usr/sbin/getpaneluserscount script
  - AWP-355: Added ability to get customer login
  - AWP-355: Added ability to get primary control panel ip
  - AWP-352: Improve detection of wp-config.php.


author: Aleksey Petryankin <apetryankin@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> 3.2.47-1
changelog:
  - AWP-403: Implement caching of cpapi method get_domains_php_info for cPanel
  - LVEMAN-1890: Enable Python/NodeJs selectors for VZ container


author:
  Dmitry Shibut <dshibut@cloudlinux.com>, Grigory Ponomarenko <gponomarenko@cloudlinux.com>, Roman Prilipskii <rprilipskii@cloudlinux.com> 3.2.48-1

changelog:
  - PTCLLIB-256: Improve RPM DB consistency checking procedure
  - PTCLLIB-257: Improve passenger package name retrieval
  - LVES-1098: Assign a Message ID to alert email messages automatically if none was provided
  - LU-3815: public API version 1.3 -- supported features list extended with AccelerateWP and CL Wizard


author: Dmitry Shibut <dshibut@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> 3.2.49-1
changelog:
  - LU-3700: Move userland projects to cl.sentry.cloudlinux.com
  - AWP-738: Filter out invalid php installed strings on Plesk


author: Dmitry Shibut <dshibut@cloudlinux.com> 3.3.0-1
changelog:
  - CLOS-1868: Improve may_detach_mounts kernel option detection process
  - CLOS-1599: Migrate to Python 3.11


author:
  Roman Krompets <rkrompets@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com> 3.3.1-1

changelog:
  - CLPRO-436: Renamed variables to ensure better consistency and clarity
  - AWP-755: Implement Custom Panel integration support by AccelerateWP


author: Roman Prilipskii <rprilipskii@cloudlinux.com> 3.3.3-1
changelog:
  - CLOS-1952: Fix MySQL localhost connection issues when using sockets
  - CLOS-1880: Improve package modification hook calling mechanism


author:
  oshyshatskyi <oshyshatskyi@cloudlinux.com>, Roman Prilipskii <rprilipskii@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> 3.3.7-1

changelog:
  - CLPRO-1395, CLPRO-1396: Add DirectAdmin support to AccelerateWP
  - CLPRO-1343: Fix bug in handling additional Plesk domains


author: Timur Kalimullin <tkalimullin@cloudlinux.com>, oshyshatskyi <oshyshatskyi@cloudlinux.com> 3.3.8-1
changelog:
  - CLPRO-1405: Added method to return panel link to AccelerateWP page
  - CLPRO-1282: Implement automatic metrics discovery


author: Daniil Danilkin <ddanilkin@cloudlinux.com>, oshyshatskyi <oshyshatskyi@cloudlinux.com> 3.3.9-1
changelog:
  - CLPRO-1377: Fixes MySQL UDS resolution from configs
  - CLPRO-1440: Remove 5-minute "edition checking" cron


author:
  Daniil Danilkin <ddanilkin@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 3.3.11-1

changelog:
  - CLPRO-1522: Fix nginx configuration parser
  - CLPRO-1613: Add support for quotes in DocumentRoot apache directive


author: Grigory Ponomarenko <gponomarenko@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> 3.3.12-1
changelog:
  - CLOS-1996: Adapt CL Solo / CL Admin to work on Virtuozzo
  - CLPRO-1585: Add ability to activate AccelerateWP Premium from Centralized Monitoring
  - CLPRO-1531: Extend universal features list with required for unification


author: alutsiuk <alutsiuk@cloudlinux.com> 3.3.14-1
changelog:
  - CLPRO-1658: Improve remove cagefs mountpoint helper
  - CLPRO-1666: Extend clcaptain utility with AccelerateWP paths


author:
  Timur Kalimullin <tkalimullin@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com>, Vladimir Lebedev <vlebedev@cloudlinux.com>, Grigory Ponomarenko <gponomarenko@cloudlinux.com> 3.3.15-1

changelog:
  - CLPRO-1668: Added method for searching username by Plesk subscription
  - CLPRO-1657: Unify UI icons display defaults across all editions
  - CLOS-2227: Make Python/Nodejs Selector work on CL Solo
  - CLOS-2375: Add support for Apache mod_lsapi PRO on CL Solo


author: Roman Krompets <rkrompets@cloudlinux.com> 3.4.0-1
changelog:
  - CLPRO-1559: Added new panel features required for unification
  - CLPRO-1607: Added methods to detect if customer hitting hosting accounts limit
  - CLPRO-1825: Fixed permission issue for server flags directory
  - CLPRO-1872: Change ordering of edition features check
  - CLPRO-1823: Fix new autotracing feature is required on Vendor Panels


author:
  alutsiuk <alutsiuk@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 3.4.1-1

changelog:
  - CLPRO-1055: Extend CPAPI with suspended users list
  - CLPRO-1899: Added Sentry tag to detect WP2 environments
  - CLOS-2350: Add fault tolerance inside lvectl for when a UID cannot be found
  - CLPRO-1873: Internal refactoring: simplify code which detects supported features
  - CLPRO-1843: Improve logging of unexpected errors in code that gathers php data


author:
  Timur Kalimullin <tkalimullin@cloudlinux.com>, Oleksandr Shyshatskyi <oshyshatskyi@cloudlinux.com> 3.4.2-2

changelog:
  - CLPRO-1905: Add the ability to run the set-suite command asynchronously in configure_accelerate_wp
  - CLPRO-1996: Automatically clean DirectAdmin domains cache on changes in control panel


author: Vladimir Lebedev <vlebedev@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com> 3.4.3-1
changelog:
  - CLOS-2260: CL Shared Pro license is being detected as Solo on the server
  - CLOS-1860: Complete migration to Python 3.11


author: Vladimir Lebedev <vlebedev@cloudlinux.com> 3.4.4-1
changelog:
  - CLOS-1600: Handle UnicodeDecodeError when parsing configs containing broken utf-8
  - CLOS-2576: Make "secureio" module lazy-loadable and importable even in case of shared libraries absence


author: Mykola Ishchenko <mishchenko@cloudlinux.com>, Vladimir Lebedev <vlebedev@cloudlinux.com> 3.4.7-1
changelog:
  - CLOS-2597: Fix issue with MySQL connections on Ubuntu due to failing to find the socket file
  - CLPRO-1564: Fix get_domains_php_info on DirectAdmin when httpd.conf is huge


author: Denis Komandyr <dkomandyr@cloudlinux.com>, Dmitry Shibut <dshibut@cloudlinux.com> 3.4.12-1
changelog:
  - CLPRO-2238: Fix user count tracking in Sentry events
  - CLOS-2902: Ignore decimal points in CPU limits


author: alutsiuk <alutsiuk@cloudlinux.com>, Denis Komandyr <dkomandyr@cloudlinux.com> 3.4.13-1
changelog:
  - CLPRO-2238: Fix logging to stderr when failed to obtain machine ip and hostname
  - CLPRO-2292: Optimize wp cache plugin search


author: alutsiuk <alutsiuk@cloudlinux.com>, Timur Averianov <taverianov@cloudlinux.com> 3.4.15-1
changelog:
  - CLOS-3024: Fix MySQLConnector closing issues
  - CLPRO-2240: Turn off aggressive debug info for CMT requests


author: Dmitry Shibut <dshibut@cloudlinux.com> 3.4.16-1
changelog:
  - CLOS-2907: Improve error handling during the server flag statistics gathering process
  - CLPRO-2301: Fix getting php version for aliases on DirectAdmin


author:
  Dzmitry Ryzhykau <dryzhykau@cloudlinux.com>, Tamar Tsotniashvili <ttsotniashvili@cloudlinux.com> 3.4.17-1

changelog:
  - CLOS-2865: Remove fallback edition value when detecting current CL edition; return None when edition cannot be detected
  - CLOS-2896: Fix error in retrieving dblogin-username pairs on DirectAdmin when ONLY_FULL_GROUP_BY is active


author: Denis Komandyr <dkomandyr@cloudlinux.com>, Roman Prilipskii <rprilipskii@cloudlinux.com> 3.4.18-1
changelog:
  - CLPRO-2480: Skip activation of Accelerate WP Free by Vendor config
  - CLOS-2083: Adapt cllib CL version retreival to handle Ubuntu versions


author: Roman Prilipskii <rprilipskii@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> 3.4.19-1
changelog:
  - CLOS-3122: Fix package presence detection logic on Ubuntu
  - CLPRO-2527: Fix cloudlinux-summary WordPress statistics collection


author: alutsiuk <alutsiuk@cloudlinux.com> 3.4.20-1
changelog:
  - CLPRO-2566: Unlocked CLPRO features for Ubuntu
  - CLPRO-2566: Fix alt-php modules dir detection
  - CLPRO-2533: Adapt accelerate-wp installation for Ubuntu22


author: Dzmitry Ryzhykau <dryzhykau@cloudlinux.com> 3.4.24-1
changelog:
  - CLOS-2881: Fix CageFS detection (clcommon.clcagefs.in_cagefs) when /var/.cagefs exists in the real file system


author: Roman Krompets <rkrompets@cloudlinux.com> 3.4.26-1
changelog:
  - CLPRO-2201: Unbind accelerate-wp from X-Ray
  - CLOS-3323: Revert to previous in_cagefs() logic based on /var/.cagefs check


author: Danila Vershinin <dvershinin@icloud.com>, Roman Suvorov <rsuvorov@cloudlinux.com> 3.4.27-1
changelog:
  - MAXWS-480: Add parameter "environment" to function clsentry.init_sentry_sdk_client
  - MAXWS-448: Added useraddondomains() for cPanel


author: mikalai <mvoina@cloudlinux.com>, alutsiuk <alutsiuk@cloudlinux.com> 3.4.29-1
changelog:
  - CLOS-2699: Fix traceback in physical_hosting_updated after modifying a domain on Plesk
  - MAXWS-598: add hooks interface for account suspension/unsuspension


author: Nika Keshelava <nkeshelava@cloudlinux.com>, Roman Prilipskii <rprilipskii@cloudlinux.com> 3.4.30-1
changelog:
  - CLOS-3303: Spread the load of 5-minute cron jobs to prevent resource usage spikes
  - CLOS-3523: Modify the OS detection logic to identify CL10 machines correctly


author: Roman Prilipskii <rprilipskii@cloudlinux.com>, Ruslan Koliada <rkoliada@cloudlinux.com> 3.4.34-1
changelog:
  - CLOS-3849: Correct LVE availability detection under user environments in cagefs
  - CLPRO-2819: Fix performance issue in _docroot_under_root


author:
  Andrei Zheregelia <azheregelia@cloudlinux.com>, Anastasia Lutsiuk <alutsiuk@cloudlinux.com> 3.4.40-1

changelog:
  - CLOS-4128, CLOS-4280: internal bugfixes
  - CLOS-4470: Fix hook name/domain validation failures for Unicode inputs on Plesk


author: José Matos <jamatos@fedoraproject.org> - 3.5.0b2-0.2
changelog:
  - Improve description to make it clear that this package in only needed for python 2.7
  - Make the license tag information more explicit.


author: Avram Lubkin <aviso@fedoraproject.org> - 3.5.0b2-1
changelog:
  - Updated to build for el6
  - Updated to build Python3 packages
  - Changed Python2 package name to python2-configparser for Fedora 24+
  - Updated description
  - Removed license comments


author: David Malcolm <dmalcolm@redhat.com> - 1.4.1-6
changelog:
  - remove embedded copy of timezone data, and redirect the dateutil.zoneinfo
  API accordingly
  Resolves: rhbz#559309
  - add a %check, running the upstream selftest suite


author: Antonio Trande <sagitterATfedoraproject.org> - 0.16.0-11
changelog:
  - Prepare SPEC file for deprecation of Python2 on fedora 30+
  - Prepare SPEC file for Python3-modules packaging on epel7


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.1.7-10
changelog:
  - Add a Provides for python-pillow since some packages are starting to require
    that but we don't have it in Fedora yet.


author: Bohuslav Kabrda <bkabrda@redhat.com> - 2.7.2-1
changelog:
  - Reverted flawed patch for #1051427 (this reintroduces #1052102).
  - Spec cleanup (removed rhel < 7 specific stuff).
  - Update to 2.7.2.
  Resolves: rhbz#1052777


author: Daniel Veillard <veillard@redhat.com> - 2.9.1-1
changelog:
  - upstream release of 2.9.1
  - a couple more API entry point
  - compatibility with python3
  - a lot of bug fixes


author: Bohuslav Kabrda <bkabrda@redhat.com> - 1.3.2-2
changelog:
  - Add patch for issue https://github.com/nose-devs/nose/pull/811,
  which makes tests of python-billiard and python-falcon fail with Python 3.4


author: Tim Flink <tflink@fedoraproject.org> - 1.4.1-1
changelog:
  - Removed patch for CVE 2013-2099 as it has been included in the upstream 1.4.1 release
  - Updated version to 1.4.1


author: Matej Stuchlik <mstuchli@redhat.com> - 1.5.6-3
changelog:
  - Added patch for local dos with predictable temp dictionary names
    (http://seclists.org/oss-sec/2014/q4/655)


author: Matej Stuchlik <mstuchli@redhat.com> - 1.5.6-3
changelog:
  - Added patch for local dos with predictable temp dictionary names                                                                               
    (http://seclists.org/oss-sec/2014/q4/655)


author: Anatholy Scryabin <ascryabin@cloudlinux.com> - 1.5.6-3
changelog:
  - update to 1.5.6-3                                                                                                                              
  - add triggers


author: Michel Salim <salimma@fedoraproject.org> - 0.4.1-3.1
changelog:
  - Conditionally declare and clean buildroot to support el5
  - Fix declaration of Python macro, and make it apply only to el5


author: Devrim Gündüz <devrim@gunduz.org> 2.5-1
changelog:
  - Update to 2.5, per changes described at:
    http://www.psycopg.org/psycopg/articles/2013/04/07/psycopg-25-released/


author: Devrim Gündüz <devrim@gunduz.org> 2.5.2-1
changelog:
  - Update to 2.5.2, per changes described at:
    http://www.psycopg.org/psycopg/articles/2014/01/07/psycopg-252-released


author: Pavel Raiskup <praiskup@redhat.com> - 2.5.3-1
changelog:
  - rebase to most recent upstream version, per release notes:
    http://www.psycopg.org/psycopg/articles/2014/05/13/psycopg-253-released/


author: Devrim Gündüz <devrim@gunduz.org> 2.5.4-1
changelog:
  - Update to 2.5.4, per changes described at:
    http://www.psycopg.org/psycopg/articles/2014/08/30/psycopg-254-released


author: Thomas Moschny <thomas.moschny@gmx.de> - 1.4.14-2
changelog:
  - Use python-sphinx for rhel > 6 (rhbz#973321).
  - Update URL.
  - Fix changelog entry with an incorrect date (rhbz#973325).


author: Karel Klic <kklic@redhat.com> - 7.19.0-6
changelog:
  - Added do_curl_reset-refcount.patch: Fixed reference counting of
    Py_None in reset function
    Resolves: rhbz#624559
  - Added do_curl_reset-reinitialize-handle.patch: Proper
    re-initialization of internal settings in reset function
    Resolves: rhbz#565654


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.4-2
changelog:
  - Fix python main package having dependencies for the python2.6 subpackage
  - Fix places that used the default python instead of python26
  - Attempt to make byte compilation more robust in case we add python3 to EPEL5
  - Run unittests on python3 in F15+


author: Ralph Bean <rbean@redhat.com> - 1.5.6-4
changelog:
  - Change our conflicts on python-SocksiPy to an obsoletes/provides.
    https://bugzilla.redhat.com/show_bug.cgi?id=1334407


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.2.4-4
changelog:
  - Add conditional for sphinx on rhel.
  - Remove rhel logic from with_python3 conditional.
  - Disable failing tests for Python3.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.3.1-1
changelog:
  - Update to 2.3.1.
  - Re-enable some tests, ignore others.
  - Docs are available in English and Japanese now.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.3.5-1
changelog:
  - Update to 2.3.5.
  - Docutils needed now to build README.html.
  - Add some BR optionally used by the testsuite.


author: Thomas Moschny <thomas.moschny@gmx.de> - 2.3.5-2
changelog:
  - Use python-sphinx for rhel > 6 (rhbz#973318).
  - Update BR to use python-pexpect instead of pexpect.


author: Ralph Bean <rbean@redhat.com> - 0.4-3
changelog:
  - Removed clean section.
  - Removed defattr.
  - Removed removing of buildroot in install section.
  - Added removal of egg-info in prep section.
  - Added python3 subpackage.


author: Ralph Bean <rbean@redhat.com> - 2.7.0-6
changelog:
  - Replace the provides macro with a plain provides field for now until we can
    re-organize this package into two different subpackages.


author: Ralph Bean <rbean@redhat.com> - 2.7.0-7
changelog:
  - Tell setuptools about what version of urllib3 we're unbundling
    for https://github.com/kennethreitz/requests/issues/2816


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.0-1
changelog:
  - Update to new upstream release with a few things removed from the API:
    Changelog: https://pypi.python.org/pypi/setuptools#id139


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.0-8
changelog:
  - Remove the python-setuptools-devel Virtual Provides as per this Fedora 21
    Change: http://fedoraproject.org/wiki/Changes/Remove_Python-setuptools-devel


author: Kyle VanderBeek <kylev@kylev.com> - 2.0.9-1
changelog:
  - Update to 2.0.9
  - Make sure to require gcc to the speedups get compiled
  - Fix description since we're not "pure" python
  - Change to pypi instead of cheesehop


author: Julien Enselme <jujens@jujens.eu> - 1.1.3-4
changelog:
  - Add pyparsing and python3-pyparsing as requires
  - Patch sources so that this bundled library is not used


author: Robert Kuska <rkuska@redhat.com> - 4.2.1-2
changelog:
  - Rebuilt for Python3.5 rebuild
  - Add patch to use getfullargspec on python3
  - Add patch to fix failing tests with python3.5


author: Ralph Bean <rbean@redhat.com> - 1.15.1-2
changelog:
  - Remove broken symlinks to unbundled python3-six files
    https://bugzilla.redhat.com/show_bug.cgi?id=1295015


author: Eduard Chiganov <echiganov@cloudlinux.com> - 3.10.13-1
changelog:
  - ALTPYTH-486: Updated to 3.10.12
  - ALTPYTH-478: fixed pam authentication through ssl
  - ALTPYTH-481: Updated to 3.10.13


author: Davit Sargsyan <dsargsyan@cloudlinux.com> - 3.14.3-1
changelog:
  - ALTPYTH-587: Update to Python 3.14.3
  - CVE-2025-15367: fix poplib command injection
  - CVE-2025-15366: Reject control characters in IMAP commands


author: Davit Sargsyan <dsargsyan@cloudlinux.com> - 0.45.1-1
changelog:
  - ALTPYTH-587: Update to upstream wheel 0.45.1 for Python 3.14
  - CVE-2026-24049 : fix path traversal in wheel unpack


author: Anatholy Scryabin <ascryabin@cloudlinux.com> - 3.3.6-1
changelog:
  - update Python to 3.3.6
  - refresh patch 111, 142, 146
  - disable patch 157, 173, 177, 183, 185, 187, 190, 192, 193, 194, 197, 198, 199


author: Anatholy Scryabin <ascryabin@cloudlinux.com> - 3.3.6-2.1
changelog:
  - rename macros.pybytecompile to macros.alt-python33-pybytecompile
  - group is changed to linksafe
  - add linksafe configuration to /etc/sysctl.conf in pre section


author: Anatholy Scryabin <ascryabin@cloudlinux.com> - 3.3.6-2.11
changelog:
  - fix for CVE-2016-1000110 HTTProxy attack
  - fix for CVE-2016-0772 python: smtplib StartTLS stripping attack
    rise an error when STARTTLS fails (upstream patch)
  - fix for CVE-2016-5699 python: http protocol steam injection attack
    disabled HTTP header injections in http.client (upstream patch)


author: Anatholy Scryabin <ascryabin@cloudlinux.com> - 3.4.4-1
changelog:
  - update Python to 3.4.4
  - disable patch 202, 204
  - add build conditional macros
  - add path-to-libpl.patch (fix wrong path to LIBPL)


author: Lumír Balhar <lbalhar@redhat.com> - 1.15.6-3
changelog:
  - Add subpackage for platform-python
  - Disable tests so platform-python stack can be bootstrapped
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Tomas Orsava <torsava@redhat.com> - 1.15.6-4
changelog:
  - Re-enable tests to finish bootstrapping the platform-python stack
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Michal Ambroz <rebus at, seznam.cz> - 3.5.0-5
changelog:
  - testModuleData is failing on arm platform even for python 2.7
  - exclude this test for build of arm


author: Michal Ambroz <rebus at, seznam.cz> - 3.5.0-6
changelog:
  - additionally testEntrypoint testIn testIntegerFunctions failing on s390/ppc64
  - exclude those tests for build of s390/ppc64


author: Eduard Abdullin <eabudllin@cloudlinux.com> - 3.7.11-4
changelog:
  - ALTPYTH-364: Fix build for old system
  - ALTPYTH-381: Added check for cl solo
  - ALTPYTH-380: Added cloudlinux-linksafe to Requires(post)


author: Orion Poplawski - 0.23.5-1
changelog:
  - Update to 0.23.5
  - Macro usage cleanup
  - Fix license tag
  - Fix line endings
  - Remove unneeded shbangs


author: Eduard Chiganov <echiganov@cloudlinux.com> - 0.28.1-8
changelog:
  - ALTPYTH-467: Get rid of alt-python dependencies errors.
  - New linksafe post, triggerin and triggerun scripts.


author: Eduardo Echeverria <echevemaster@gmail.com> 0.9.1-1
changelog:
  - Update to latest upstream.
  - although this package have py3 support, the resultant python3 package 
    doesn't existed, reason? On install section, py3 setup install must be first,
    if not, with every running of setup.py install, setup.py overwrite the files, 
    this behaviour has been fixed
  - Workaround for python2 macro in epel versions
  - use python2 macro instead of python


author: Bohuslav Kabrda <bkabrda@redhat.com> - 0.9.1-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4
  - Bootstrap test running (circular dependency with python-lxml)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@bupkis> - 1:2.5.0-1
changelog:
  - Update to latest upstream version
  - The patch to make dateutil.zoneinfo.gettz() use the system database is dropped.
    Upstream recommends using dateutil.tz.gettz() instead.


author: Carl George <carl.george@rackspace.com> - 1.0.0-2
changelog:
  - Remove separate py3 build directory
  - Update summary and description
  - Use a common license and documentation directories between PY2/3 packages


author: Carl George <carl.george@rackspace.com> - 1.0.1-2
changelog:
  - Remove coverage build dependency
  - Change python3 control macros to a bcond macro
  - Add bcond macro to optionally require explicit python2 names


author: Eduard Chiganov <echiganov@cloudlinux.com> - 1.2.2-7
changelog:
  - ALTPYTH-464: Fixed failed dependecies through update of filter.
  - New linksafe post, triggerin and triggerun scripts.


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 3.3.6-1
changelog:
  - 3.3.6 (2014-08-28)
  - ==================
  -
  - Bugs fixed
  - ----------
  -
  - * Prevent tree cycle creation when adding Elements as siblings.
  -
  - * LP#1361948: crash when deallocating Element siblings without parent.
  -
  - * LP#1354652: crash when traversing internally loaded documents in XSLT
  -   extension functions.


author: Eduard Chiganov <echiganov@cloudlinux.com> - 20.2.4-5
changelog:
  - ALTPYTH-458: Fix dependency error while install alt-python37.
  - New filter for provides, new post scriplets


author: Ralph Bean <rbean@redhat.com> - 0.6.1-1
changelog:
  - New upstream version
  - Added support for python3
  - Included README, COPYING, and CHANGELOG in docs


author: Miro Hrončok <mhroncok@redhat.com> - 0.2.0-4
changelog:
  - Subpackage python2-prometheus_client has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Thomas Moschny <thomas.moschny@gmx.de> - 1.4.28-1
changelog:
  - Update to 1.4.28.
  - Modernize spec file.
  - Apply updates Python packaging guidelines.
  - Mark LICENSE with %license.


author: Thomas Moschny <thomas.moschny@gmx.de> - 1.4.31-1
changelog:
  - Update to 1.4.31.
  - Follow updated Python packaging guidelines.
  - Add Provides tag for bundled apipkg.


author: Jamie Nguyen <jamielinux@fedoraproject.org> - 0.1.6-1
changelog:
  - update to upstream release 0.1.6
  - update modules to 0.0.4
  - update description
  - add python3-pyasn1 subpackage
  - add versioned Requires for the module subpackages
  - add %check section


author: Luke Macken <lmacken@redhat.com> - 2.0.0-1
changelog:
  - The pep8 project has been renamed to pycodestyle
  - Create python2 subpackage
  - Update the source url to use pypi.io
  - Build a man page instead of html docs


author: Luke Macken <lmacken@redhat.com> - 2.0.0-2
changelog:
  - Use the new python setup/build/install macros
  - Remove Obsoletes/Provides for pep8, since it is currently not a drop-in replacement.
    https://bugzilla.redhat.com/show_bug.cgi?id=1342839#c10


author: John Morris <john@zultron.com> - 6.2.4-7.280svn20130805
changelog:
  - Update to SVN r280 for python3 compatibility
  - Update python-pycxx-6.2.4-setup.py.patch to apply correctly
  - Fix %setup for SVN zipball
  - Add diff extensions to %patch macros
  - Enable python3 pkg by default except for EPEL; see BZ 991342


author: Eduard Abdullin <eabudllin@cloudlinux.com> - 20.3.0-4
changelog:
  - ALTPYTH-280: Fix twisted-dropin-cache for python3
  - ALTPYTH-380: Fixed bug with missing linksafe group
  - Update requires


author: sebix+novell.com@sebix.at
changelog:
  - update to version 1.0.4
    Add checks for some 3.5+ only syntax (async/await and the @ operator) (#41)


author: Sergey Fokin <sfokin@cloudlinux.com> 3.8.12-2
changelog:
  - ALTPYTH-413: move -fno-semantic-interposition to CFLAGS_NODIST
  - remove changing gcc to devtoolset-gcc
  - change BuildRequire from gcc-toolset to system gcc for CL8


author: Remi Collet <remi@remirepo.net> - 6.0.9-3
changelog:
  - move configuration in /etc/redis per upstream recommendation
    see https://github.com/redis/redis/issues/8051


author: Remi Collet <remi@remirepo.net> - 6.2.0-1
changelog:
  - Redis 6.2.0 GA - Released Tue Feb 22 14:00:00 IST 2021
  - Upgrade urgency: SECURITY if you use 32bit build of redis,
    MODERATE if you used earlier versions of Redis 6.2, LOW otherwise


author: Remi Collet <remi@remirepo.net> - 6.2.2-1
changelog:
  - Redis 6.2.2 - Released Mon April 19 19:00:00 IST 2021
  - Upgrade urgency: HIGH, if you're using ACL and pub/sub,
    CONFIG REWRITE, or suffering from performance regression.


author: Igor Zubkov <izubkov@cloudlinux.com> 1.9.3-3
changelog:
  - 1.9.3-p550 security and bugfix release
    (https://www.ruby-lang.org/en/news/2014/10/27/ruby-1-9-3-p550-is-released/)
  - CVE-2014-8080: Denial of Service XML Expansion
    (https://www.ruby-lang.org/en/news/2014/10/27/rexml-dos-cve-2014-8080/)
  - Changed default settings of ext/openssl related to CVE-2014-3566 AKA POODLE
    (https://www.ruby-lang.org/en/news/2014/10/27/changing-default-settings-of-ext-openssl/)


author: Anatholy Scryabin <ascryabin@cloudlinux.com> 1.9.3-4
changelog:
  - update patchlevel to 551 (fix CVE-2014-8090)
  - initialize rubygems cache in posttrans section (fix ALR-6)
  - bump package rubygems epoch (bugfix version)
  - add BuildRoot for cl5
  - disable doc's BuildArch for cl5
  - disable ca-certification Requires and BR for cl5


author: Igor Zubkov <izubkov@cloudlinux.com> 2.0.0-3
changelog:
  - 2.0.0-p594 security and bugfix release
    (https://www.ruby-lang.org/en/news/2014/10/27/ruby-2-0-0-p594-is-released/)
  - CVE-2014-8080: Denial of Service XML Expansion
    (https://www.ruby-lang.org/en/news/2014/10/27/rexml-dos-cve-2014-8080/)
  - Changed default settings of ext/openssl related to CVE-2014-3566 AKA POODLE
    (https://www.ruby-lang.org/en/news/2014/10/27/changing-default-settings-of-ext-openssl/)


author: Anatholy Scryabin <ascryabin@cloudlinux.com> 2.0.0-4
changelog:
  - update patchlevel to 598 (fix CVE-2014-8090)
  - initialize rubygems cache in posttrans section (fix ALR-6)
  - add BuildRoot for cl5
  - disable ca-certification Requires and BR for cl5
  - disable doc's BuildArch for cl5


author: Anatholy Scryabin <ascryabin@cloudlinux.com> 2.0.0-7
changelog:
  - update patchlevel to 647
  - group is changed to linksafe
  - add linksafe configuration to /etc/sysctl.conf in pre section


author: Anatholy Scryabin <ascryabin@cloudlinux.com> 2.0.0-17
changelog:
  - add locked_extensions
  - add trigers to subpackages of rubygem
  - add condition for build with linksafe
  - conflicts with lvemanager < 1.0-9.43


author: Anatholy Scryabin <ascryabin@cloudlinux.com> 2.1.7-3
changelog:
  - update ruby to 2.1.7
  - group is changed to linksafe
  - add linksafe configuration to /etc/sysctl.conf in pre section


author: Sergey Fokin <sfokin@cloudlinux.com> 2.1.8-8
changelog:
  - update to 2.1.8
  - bump rubygems_version to 2.2.5
  - add cloudlinux-linksafe in Requires(pre)
  - add macros for disable linksafe
  - add script find_subpackage_version.sh for check rubygems versions


author: Igor Zubkov <izubkov@cloudlinux.com> 2.1.4-1
changelog:
  - 2.1.4 security and bugfix release
    (https://www.ruby-lang.org/en/news/2014/10/27/ruby-2-1-4-released/)
  - CVE-2014-8080: Denial of Service XML Expansion
    (https://www.ruby-lang.org/en/news/2014/10/27/rexml-dos-cve-2014-8080/)
  - Changed default settings of ext/openssl related to CVE-2014-3566 AKA POODLE
    (https://www.ruby-lang.org/en/news/2014/10/27/changing-default-settings-of-ext-openssl/)


author: Anatholy Scryabin <ascryabin@cloudlinux.com> 2.1.5-1
changelog:
  - Update to 2.1.5 (fix CVE-2014-8090)
  - initialize rubygems cache in posttrans section (fix ALR-6)
  - add BuildRoot for cl5
  - disable ca-certification Requires and BR for cl5
  - disable doc's BuildArch for cl5


author: Sergey Fokin <sfokin@cloudlinux.com> 2.1.5-2
changelog:
  - remove unnecessary Provides to avoid conflicts with system ruby
  - add Obsoletes for previous alt-ruby versions


author: Anatholy Scryabin <ascryabin@cloudlinux.com> 2.2.5-18
changelog:
  - add locked_extensions
  - add trigers to subpackages of rubygem
  - conflicts with lvemanager < 1.0-9.43


author: Eduard Chiganov <echiganov@cloudlinux.com> - 2.4.10-15
changelog:
  - ALR-140: Fixed mistake in net-telnet version description (epoch added).
  - Conflicts dependencies added.


author: Eduard Chiganov <echiganov@cloudlinux.com> - 2.6.10-9
changelog:
  - ALR-140: Mistake in net-telnet version description was fixed through epoch usage.
  - Conflicts dependencies added.
  - ALR-150: Updated to 2.6.10-9 release to prevent rubygems version conflicts.


author: Eduard Chiganov <echiganov@cloudlinux.com> - 2.7.6-138
changelog:
  - ALR-140: Mistake in net-telnet version description was fixed through epoch usage.
  - ALR-149: Patch for ipaddr fixed.
  - ALR-151: Update to 2.7.6 version
  - Conflicts dependencies added.


author: Eduard Chiganov <echiganov@cloudlinux.com> - 3.0.4-161
changelog:
  - ALR-153: Updated to 3.0.4
  - Patch 23 (Fix-stack-buffer-overflow) disabled because fixed in upstream.
  - Broken symlink in ruby-libs deleted.


author: Jan Stanek <jstanek@redhat.com> - 3.7.16.2-1
changelog:
  - update to 3.7.16.2 (http://www.sqlite.org/releaselog/3_7_16_2.html)
  - add support for aarch64 (rerunning autoconf) (#926568)


author: Panu Matilainen <pmatilai@redhat.com> - 3.7.15-1
changelog:
  - update to 3.7.15 (http://www.sqlite.org/releaselog/3_7_15.html)
  - fix an old incorrect date in spec changelog


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.1.2-6
changelog:
  - Resolves: #556398
  - Directly included relevant patches, scripts and man pages from Debian
  - Removed rpath
  - rpmlint is silent now


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.1.2-6.1
changelog:
  - Fixed CVE-2010-2642, CVE-2011-0433, CVE-2011-0764, CVE-2011-1552, CVE-2011-1553, CVE-2011-1554
    Resolves: rhbz#772900


author: Benjamin Gilbert <bgilbert@backtick.net> - 8.5.6-1
changelog:
  - New release
  - Rename Python packages per policy
  - Update project URLs
  - Rename pygobject3-base dependency to python-gobject-base
  - Switch python3-gobject dependency to python3-gobject-base
  - Add missing arch-specific Python provide
  - Drop Group tags


author: Josef Ridky <jridky@redhat.com> - 3.3.3-18
changelog:
  - Resolves: #1286330 - set non-blocking connection
  - Resolves: #1299761 - fix amindex: invalid service
  - Resolves: #1306980 - fix problem with handling compressed files


author: Josef Ridky <jridky@redhat.com> - 3.3.3-21
changelog:
  - Resolves: #1417830 - check return value from setreuid method
  - Resolves: #1423040 - fix local authentication issue


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.125-1
changelog:
  - Fix storage spoke completeness checking (rvykydal)
    Resolves: rhbz#1496416
  - Missing dot in testing availability message (jkonecny)
    Related: rhbz#1478970


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.127-1
changelog:
  - Enable SE/HMC file access to repo (vponcova)
    Resolves: rhbz#1289918
  - Support timeout and retries options in %packages section (vponcova)
    Resolves: rhbz#1448459


author: Eugene Zamriy <ezamriy@cloudlinux.com> - 21.48.22.129-1.cloudlinux
changelog:
  - added expat-devel and pcre-devel build time requirements
    because pkg-config fails to detect gobject-introspection
    and gladeui without them


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.130-1
changelog:
  - kickstart: use RHEL7_Firewall instead of F28_Firewall (dusty)
    Related: rhbz#1526450
  - kickstart: support firewall --use-system-defaults (dusty)
    Resolves: rhbz#1526450
  - Check payload is set before accessing its data (mkolman)
    Resolves: rhbz#1524785
  - Fix bad bash '*' expansion when loading kernel modules (jkonecny)
    Resolves: rhbz#1519220


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.134-1
changelog:
  - Revert "UI support for configuring certain mitigations (mkolman)"
    Resolves: rhbz#1546267
  - Revert "Performance spoke related CI fixes" (mkolman)
    Related: rhbz#1546267
  - Revert "Fix mitigation toggling with kickstart" (mkolman)
    Related: rhbz#1546267


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.137-1
changelog:
  - Improve UI feedback for invalid boot on non-iBFT iSCSI devices. (rvykydal)
    Related: rhbz#1562301
  - Add inst.nonibftiscsiboot boot option. (rvykydal)
    Resolves: rhbz#1562301


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.139-1
changelog:
  - installclasses/rhelah: Allow LVM thin and dm-crypt (walters)
    Resolves: rhbz#1546252
  - Ask for a default passphrase if required (vponcova)
    Resolves: rhbz#1436304
  - Add support for setting different types of passwords in TUI (vponcova)
    Related: rhbz#1436304


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.140-1
changelog:
  - Preserve the boot option zfcp.allow_lun_scan (vponcova)
    Resolves: rhbz#1561662
  - Don't display "Alternate Architectures" in product name (rvykydal)
    Resolves: rhbz#1488558


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.143-1
changelog:
  - Add data loss warning to nvdimm reconfigure dialog. (rvykydal)
    Resolves: rhbz#1280500
  - Add UI feedback for disk repopulating after nvdimm reconfiguration.
    (rvykydal)
    Resolves: rhbz#1280500
  - Use only devices specified by nvdimm command for installation. (rvykydal)
    Resolves: rhbz#1280500
  - Add option to reconfigure nvdimm devices into sector mode. (rvykydal)
    Resolves: rhbz#1280500
  - Allow only devices in sector mode to be selected. (rvykydal)
    Resolves: rhbz#1280500
  - Add nvdimm devices to Advanced Storage spoke. (rvykydal)
    Resolves: rhbz#1280500
  - Add kickstart support for nvdimm reconfiguration to sector mode. (rvykydal)
    Resolves: rhbz#1280500


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.144-1
changelog:
  - Don't allow unlocking and using of LUKS2 devices (vponcova)
    Resolves: rhbz#1608251
  - Fix glade accelerator conflicts (rvykydal)
    Related: rhbz#1602436
  - Add nvdimm files to POTFILES.in (rvykydal)
    Related: rhbz#1602436
  - Support nvdimm only on x86_64 (rvykydal)
    Resolves: rhbz#1602436


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.146-1
changelog:
  - Revert "If someone really wants to eject the cdrom, then do it. (jkonecny)"
    Resolves: rhbz#1618408


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.148-1
changelog:
  - Change Skylake Spectre_V2 default to Retpolines (vponcova)
    Resolves: rhbz#1659626
  - nvdimm: update ks data for actions in UI (rvykydal)
    Resolves: rhbz#1620109
  - nvdimm: use pykickstart constant for setting reconfigure mode (rvykydal)
    Related: rhbz#1620109
  - Skip version when processing kernel boot args (jkonecny)
    Resolves: rhbz#1637112
  - Make save button insensitive in LUKS dialog with no input (mkolman)
    Resolves: rhbz#1489713


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.149-1
changelog:
  - Offer only supported sector sizes in NVDIMM reconfiguration dialog (rvykydal)
    Resolves: rhbz#1614049


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.153-1
changelog:
  - Fix tests and add new tests (jkonecny)
    Related: rhbz#1701032
  - Do not calculate hash for disabled repos (jkonecny)
    Related: rhbz#1701032
  - Test proxy only if set (jkonecny)
    Related: rhbz#1701032
  - Add certificate to the repo files (jkonecny)
    Resolves: rhbz#1701032
  - Use SSLOptions for RepoMDMetaHash object (jkonecny)
    Related: rhbz#1701032
  - Use SSLOptions for YUM calls (jkonecny)
    Related: rhbz#1701032
  - Use SSLOptions for Base repository (jkonecny)
    Related: rhbz#1701032
  - Use new ssl certificate KS option for .treeinfo (lars)
    Related: rhbz#1701032


author: Radek Vykydal <rvykydal@redhat.com> - 21.48.22.158-1
changelog:
  - network: use DEVICETYPE for team when updating virtual slaves ifcfgs
    (rvykydal)
    Resolves: rhbz#1680606
  - dracut/parse-kickstart: Set DEVICETYPE instead of TYPE in a team master ifcfg file
    (ptalbert)
    Resolves: rhbz#1680606


author: Brian C. Lane <bcl@redhat.com> - 19.31.114-1
changelog:
  - Pass the help content version to the script that generates it (mkolman)
    Related: rhbz#1072033
  - Use Anaconda version for the help subpackage (mkolman)
    Related: rhbz#1072033


author: Brian C. Lane <bcl@redhat.com> - 19.31.115-1
changelog:
  - Fix EOF error that occurs if user input required in x3270. (jstodola)
    Resolves: rhbz#1171135
  - Remove magic from the passphrase dialog (vpodzime)
    Resolves: rhbz#1168645
  - Close file descriptors when forking child processes (vpodzime)
    Related: rhbz#1083978
  - Close file descriptors when running ntpdate (vpodzime)
    Resolves: rhbz#1083978


author: Brian C. Lane <bcl@redhat.com> - 19.31.116-1
changelog:
  - Fix the way we create the list of DASDs needing dasdfmt. (sbueno+anaconda)
    Related: rhbz#1073982
  - Fix threading issues for dasdfmt in gui storage. (sbueno+anaconda)
    Resolves: rhbz#1073982
  - Make sure /boot is not LVM LV if we're on s390x (sbueno+anaconda)
    Resolves: rhbz#873135


author: Brian C. Lane <bcl@redhat.com> - 19.31.118-1
changelog:
  - Fix handling of md fwraid names in kickstart bootloader command. (dlehman)
    Resolves: rhbz#1167375
  - Do not bypass name setters in the custom spoke. (dlehman)
    Related: rhbz#1138370
  - Don't try to use math.ceil on blivet.size.Size instances. (dlehman)
    Resolves: rhbz#1164191
  - Preserve kickstart url behavior for mirrorlist (bcl)
    Related: rhbz#1109933
  - Use a backslash to escape nfs spaces instead of x20 (bcl)
    Related: rhbz#1109933
  - Allow adding prepboot to a blank disk in custom (bcl)
    Resolves: rhbz#1176829


author: Brian C. Lane <bcl@redhat.com> - 19.31.119-1
changelog:
  - Update error handler classes (bcl)
    Resolves: rhbz#1181146
  - Pass a Size instance to blivet instead of number of bytes (vpodzime)
    Related: rhbz#1171116
  - If using pre-existing, no size needs to be specified in ksdata (amulhern)
    Resolves: rhbz#1169783


author: Brian C. Lane <bcl@redhat.com> - 19.31.121-1
changelog:
  - network: adapt to NetworkManager package split-up (rvykydal)
    Resolves: rhbz#1182633
  - network: pass team opts to dracut for netroot (rvykydal)
    Resolves: rhbz#1075666


author: Brian C. Lane <bcl@redhat.com> - 19.31.122-1
changelog:
  - Show empty VGs in the custom spoke. (dlehman)
    Resolves: rhbz#1185832
  - network: add teamd package if team is used during installation (rvykydal)
    Resolves: rhbz#1185670


author: Martin Kolman <mkolman@redhat.com> - 7.3.1-1
changelog:
  - Bump epoch to fix upgrades from the Anaconda help content subpackage (mkolman)
    Resolves: rhbz#1275285
  - Add help content for the Subscription Manager addon spoke (cspicer)
    Resolves: rhbz#1260071


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.9.1-3
changelog:
  - Remove arch-specific patch as ant is noarch now
  - Remove bcond macro definitions (provided by rpm itself)
  - Remove Group tags
  - Update to current packaging guidelines
  - Run tests in %check instead of %build
  - Remove dependencies on xerces-j2 and xml-commons-apis, resolves: rhbz#838711
  - Convert %global build_javadoc to conditional
  - Remove bootstrap code, resolves: rhbz#915437
  - Fail the build if any of JARs is empty
  - Skip running tests that fail on Koji, resolves: rhbz#979496
  - Merge scripts into main package, resolves: rhbz#798975


author: Tomas Radej <tradej@redhat.com> - 1.0-0.19.b3
changelog:
  - Added LICENSE to javadoc (#879349)
  - Added ASL 2.0 licence text (#879354)
  - Added requires on jpackage-utils in javadoc (#879356)


author: Miloš Jakubíček <xjakub@fi.muni.cz> - 0:2.7.7-23
changelog:
  - Add patch updating license on ShowString.java and StreamConverter.java
    examples (thanks to Tom Callaway, see BZ#848662)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.0-6
changelog:
  - Drop BR on zip, use jar instead
  - Add more verbose description
  - Update to current packaging guidelines


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.8.3-5
changelog:
  - Packaging fixes
  - Remove unneeded depmap
  - Remove versioned jars and javadocs
  - Use maven 3 to build


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.8.3-10
changelog:
  - Build with xmvn
  - Don't generate extra JARs
  - Simplify build dependencies
  - Update to current packaging guidelines


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.8.3-13
changelog:
  - Add BuildRequires on apache-commons-parent >= 26-7
  - Remove BuildRequires on commons-collections-testframework


author: Chris Spike <chris.spike@arcor.de> 1.2-3
changelog:
  - Removed maven* BRs in favour of apache-commons-parent
  - Added deprecated groupId to depmap for compatibility reasons


author: Jaromir Capik <jcapik@redhat.com> 3.2.1-13
changelog:
  - saxon dependency removed - not needed
  - minor spec file changes according to the latest guidelines


author: Orion Poplawski <orion@cora.nwra.com> - 2.1.1-6
changelog:
  - Update to current maven spec guidelines to fix build (bug 979497)
  - Add patch to fix test with junit 4.11


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.1.2-1
changelog:
  - Update to upstream version 1.1.2
  - Convert POM to POM macros
  - Remove OSGi manifest patch; fixed upstream


author: Ville Skyttä <ville.skytta@iki.fi> - 1.3.1-7
changelog:
  - Tweak source encoding to fix build with Java 1.7.
  - Drop versioned jars and javadoc dir.
  - Drop no longer needed javadoc Obsoletes.
  - Crosslink with local JDK API docs.


author: Chris Spike <spike@fedoraproject.org> 1.4.0-1
changelog:
  - Updated to 1.4.0
  - Switched build tool from ant to maven
  - Updated to latest java packaging guidelines
  - Dropped oro BR/R


author: Michal Srb <msrb@redhat.com> - 2.3.0-4
changelog:
  - Remove prebuilt documentation in %prep
  - Install NOTICE file with javadoc subpackage
  - Resolves: rhbz#854311


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 10-6
changelog:
  - Add missing R: maven-remote-resources-plugin, apache-resource-bundles
  - Add %check to verify dependencies during build


author: Orion Poplawski <orion@cora.nwra.com> 0.8-8
changelog:
  - Add apache-rat wrapper script to apache-rat-core (bug #907782)
  - Disable tests for now due to Fedora maven bug


author: Mary Ellen Foster <mefoster at gmail.com> 2-2
changelog:
  - Add plugin dependencies from POMs
  - Fix description
  - Remove maven-release plugin (not on Fedora yet)


author: Ilia Gorchakov <igorchakov@cloudlinux.com> - 20.1102-1
changelog:
  - Fixed normalization for versions (DEF-14069)
  - Changed behavior for non-existent directories (DEF-14117)
  - Fixed bug in read directories by function file_get_contents (DEF-14047)


author: Ilia Gorchakov <igorchakov@cloudlinux.com> - 20.1117-1
changelog:
  - Fixed output on empty input (DEF-14770)
  - Added real_path field for slite report (DEF-14365)
  - Added uid field for slite report (DEF-13657)


author: Ilia Gorchakov <igorchakov@cloudlinux.com> - 20.1117-1
changelog:
  - Fixed output on empty input (DEF-14770)
  - Added real_path field for sqlite report (DEF-14365)
  - Added uid field for slite report (DEF-13657)


author: Ilia Gorchakov <igorchakov@cloudlinux.com> - 21.0908-1
changelog:
  - Fixed script for update AppVersionDetector package (DEF-17661)
  - Fixed return code (DEF-17662)
  - Added detection for phpmyadmin (DEF-10502)
  - Added detection for Modx, IPB, PHPBB3, OsCommerce and Bitrix (DEF-10501)
  - Added PHP 8.0 support (DEF-17446)
  - Changed EULA (DEF-17426)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 2.0.16-12
changelog:
  - Build with XMvn
  - Remove system-scoped dependency on tools.jar
  - Update to current packaging guidelines


author: Jesper Dangaard Brouer <brouer@redhat.com> - 0.0.4-5
changelog:
  - fix issues reported by static analysis tools
    Resolves: rhbz#1027762
  - add man-pages for arptables-{save,restore}
    Resolves: rhbz#1025726


author: Jesper Dangaard Brouer <brouer@redhat.com> - 0.0.4-8
changelog:
  - Add missing long option --set-counters and update documentation
    Corrosponding short option -c was implemented, but undocumented.
    Resolves: rhbz#1050854


author: Ales Ledvinka <aledvink@redhat.com> - 14:2.1a15-26
changelog:
  - fix permissions related to collected database
  - update ethcodes defaults to current public IEEE OUI-32


author: Todd Zullinger <tmz@pobox.com> - 8.4.5-3
changelog:
  - Use 'unsafe' mode by default (bug 506953)
  - Install filter scripts in %{_datadir}/asciidoc
  - Convert spec file, CHANGELOG, and README to utf-8
  - Preserve timestamps on installed files, where feasible
  - s/$RPM_BUILD_ROOT/%{buildroot} and drop duplicated /'s
  - Fix rpmlint mixed-use-of-spaces-and-tabs and end-of-line-encoding warnings


author: Ville Skyttä <ville.skytta@iki.fi> - 8.4.5-4
changelog:
  - Remaining improvements from #480288:
  - Add dependencies on libxslt and docbook-style-xsl.
  - Install dblatex style sheets.
  - Exclude unneeded *.py[co].
  - Install python API.
  - Specfile cleanups.


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 8.6.8-1
changelog:
  - Update to latest upstream version
  - Move things around make docs dir actually working
  - Add proper requires on vim-filesystem
  - Run testsuite
  - Split music and latex support to subpackages


author: Marcela Mašláňová <mmaslano@redhat.com> - 3.1.13-10
changelog:
  - fix license field
  - fix systemd macros in scriptlets part of the specfile
  - fix selinux patch to apply without fuzz=2


author: Marcela Mašláňová <mmaslano@redhat.com> - 3.1.13-16
changelog:
  - the correct solution is remove smp_flags, they don't work properly on ppc with
    the option mpower7
  - Related: rhbz#1048745


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.13-21
changelog:
  - correct the DST correction when using UTC time specification (#1328832)
  - clear non-job files from at dir and test for write error on fclose
    to fix bogus syslog messages


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.13-22.2
changelog:
  - fix handling of the aborted jobs (due to possibly
    temporary conditions) and avoid flooding the syslog


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.13-23
changelog:
  - fix the ownership of the spool directory (#1414228)
  - document the -n option of atd (#739870)
  - fix handling of the aborted jobs (due to possibly
    temporary conditions) and avoid flooding the syslog


author: Ray Strode <rstrode@redhat.com> 1.32.0-2
changelog:
  - Switch back to orbit stack by default
  http://lists.fedoraproject.org/pipermail/desktop/2010-October/006568.html


author: Kalev Lember <kalev@smartlink.ee> - 2.22.2-4
changelog:
  - Spec cleanup
  - Actually co-own /usr/share/devhelp/ directory
  - Require base package from -doc subpackage


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 3.10.1-7
changelog:
  - change x86_64 archdef to P4, prefetch instruction from hammer is illegal on some pentium 4
  - add -fstack-protector-strong to flags
  - Resolves: rhbz#1070783


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 3.10.1-9
changelog:
  - ppcle patches (conflicting patches modified)
  - tests on ppcle disabled to shorten build time and fit into 24 hour limit
  - resolves bug 1125475
  - aarch64 patches
  - Resolves: rhbz#1061956


author: Jaromir Capik <jcapik@redhat.com> - 3.10.1-10
changelog:
  - patching for Power8 to pass performance tunings and tests on P8 builders
  - re-enabling tests on ppc64le
  - Resolves: rhbz#1125475


author: Jakub Martisko <jamartis@redhat.com> - 3.10.1-11
changelog:
  - apply patches 99 and 110 to all ppc variants
  - build lapack with -frecursive flag (#1176026)
  - fix possible memory leak (#1350536)
  - fix wrong sed substitutions (#1402627)
  - Resolves: rhbz#1350536
  - Related: rhbz#1176026


author: Jakub Martisko <jamartis@redhat.com> - 3.10.1-12
changelog:
  - cleanup: merge the application of ppc patches from previous commit
    into single block
  - Related: rhbz#1350536


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 3.10.1-1
changelog:
  - Rebase to 3.10.1
  - Dropped x86_64-SSE2, ix86-SSE1, ix86-3DNow, z10, z196 (uncompilable).
  - Modified incompatible patches.
  - Added armv7neon support, modified archdef from softfp abi to hard abi.
  - Modified Make.lib to include build-id, soname, versioned library name and symlinks.
  - Now builds monolithic libsatlas (serial) and libtatlas (threaded)
    libraries with lapack and blas included.
  - Lapack source tarball needed instead of static library.
  - Disabled cpu throttling detection again (sorry, could not work on atlas
    otherwise, feel free to enable yet again - atlas-throttling.patch).
  - Removed mentions of "Fedora" to promote redistribution.
  - Modified parts of atlas.spec sometimes left in place, work still in progress,
    cleanup needed.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1:0.3.6-5
changelog:
  - Merge fix from upstream pull request #25 for CVE-2015-7747.
    Test conversion from e.g. 16-bit LE stereo to 8-bit LE mono
    no longer causes corruption.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 1:0.3.6-7
changelog:
  - Merge upstream pull requests #42,#43,#44 from Agostino Sarubbo to fix
    security issues.  CVE-2017-6827, CVE-2017-6828,
    CVE-2017-6829, CVE-2017-6830, CVE-2017-6831,
    CVE-2017-6832, CVE-2017-6833, CVE-2017-6834, CVE-2017-6835,
    CVE-2017-6836, CVE-2017-6837, CVE-2017-6838, CVE-2017-6839


author: Wim Taymans <wtaymans@redhat.com> - 1:0.3.6-9
changelog:
  - Apply security patches. CVE-2018-17095, CVE-2018-13440
  - Resolves: rhbz#1600369, rhbz#1601014, rhbz#1637128


author: Steve Grubb <sgrubb@redhat.com> 2.4.1-4
changelog:
  - Remove golang bindings added under the following bz
  resolves: #1115196 - Add golang bindings for libaudit


author: Steve Grubb <sgrubb@redhat.com> 2.6.5-4
changelog:
  resolves: #1382397 - write_logs option is not correctly handled
  resolves: #1414812 - Setting log_format to NOLOG make auditd core dump


author: Steve Grubb <sgrubb@redhat.com> 2.7.4-1
changelog:
  resolves: #1367703 - auvirt wasn't supporting date keywords
  resolves: #1396792 - augenrules includes files ending in regexp "rules"
  resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character


author: Steve Grubb <sgrubb@redhat.com> 2.7.5-1
changelog:
  resolves: #1437187 - audit rpm postinstall script points to non-existing file
  resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page & rules
  resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
  resolves: #1438997 - SECCOMP records have wrong syscall


author: Steve Grubb <sgrubb@redhat.com> 2.7.8-1
changelog:
  resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
  resolves: #1448526 - aureport shows the wrong auid "-1"
  resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
  resolves: #1482121 - python audit crash dereferencing auparse_state_t le field


author: Steve Grubb <sgrubb@redhat.com> 2.8.1-1
changelog:
  resolves: #982154 - Can't find the "avc" event with the auvirt command
  resolves: #1101605 - Ipv6 seems no working
  resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
  resolves: #1455598 - Default port is wrong in audisp-remote.conf
  resolves: #1476406 - Audit package rebase


author: Steve Grubb <sgrubb@redhat.com> 2.8.4-1
changelog:
  resolves: #1559032 - Rebase audit package to 2.8.4 to pick up bug fixes
  resolves: #1573889 - auditd busy loop in rotate_logs() with num_logs < 2
  resolves: #1534748 - incorrect addr field when using IPv6 for remote logging
  resolves: #1515903 - ausearch-expression man page missing \timestamp_ex
  resolves: #1511606 - aureport AVC report header is incomplete
  resolves: #1504251 - make auditd dump internal state for log writing status


author: Steve Grubb <sgrubb@redhat.com> 2.8.5-1
changelog:
  resolves: #1651761 - Rebase audit package to 2.8.5 to pick up bug fixes
  resolves: #1462178 - audit rule arch changed from b32 to b64 on ppc64le
  resolves: #1614833 - audispd loops reloading config 
  resolves: #1622194 - audisp-remote memory leak when using krb5 
  resolves: #1625156 - audisp-remote wont connect if remote ending action not reconnect
  resolves: #1628626 - aureport -a --failed does not display user_avc events 
  resolves: #1648005 - tcp listener socket fails when ipv6.disable=1 boot command
  resolves: #1650670 - space left in auditd.conf expressed as a percentage 
  resolves: #1663285 - ausearch device/inode missing when using a single file 
  resolves: #1672287 - max_log_file_action "keep_logs" doesn't behave as described


author: Dominic Cleal <dcleal@redhat.com> - 1.4.0-1
changelog:
  - Rebase to Augeas 1.4.0
  - Revert some changes for better compatibility with 1.1.0-17:
    * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
    * Dnsmasq: revert splitting of address/server options
    * Dovecot: restore quotes within values
    * Jaas: revert semicolon and line break changes
    * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
    * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
    * Syslog: restore tree without protocol for UDP hosts
    * UpdateDB: keep Simplevars to load config by default


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-4
changelog:
  - Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
  - Skip testSaveNoPermission when running as root (RHBZ#1269817)
  - Chrony: allow signed numbers (RHBZ#1302017)
  - Krb5: support includedir (RHBZ#1406111)


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-5
changelog:
  - Cgconfig: allow fperm & dperm in admin & task (RHBZ#1325741)
  - Grub: handle top-level "boot" directive (RHBZ#1484261)


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-9
changelog:
  - Add "Provides: bundled(gnulib)" to augeas-libs, as it embeds gnulib
    (RHBZ#1653766)
  - Anaconda: new lens (RHBZ#1657189)


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-10
changelog:
  - Krb5: support realms that start with numbers; add more pkinit_* options;
    improve handling of [dbmodules]; allow include/includedir directives
    everywhere (RHBZ#1670420)
  - Grub: handle '+' in kernel command line options (RHBZ#1758357)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-13
changelog:
  - aug_save: return error when unlink fails (RHBZ#1091143)
  - augtool: add aliases to autocomplete (RHBZ#1100076)
  - augtool: remove unused dump-xml arg (RHBZ#1100106)
  - Automounter: parse hostnames with hyphens (RHBZ#1075162)
  - Cgconfig: parse other valid controllers (RHBZ#1112543)
  - Chrony: add lens (RHBZ#1071947)
  - docs: update man page with new commands (RHBZ#1100077)
  - Exports: permit colons for IPv6 client addresses (RHBZ#1067030)
  - Httpd: parse continued, quoted lines (RHBZ#1100551)
  - Ldso: parse hwcap lines (RHBZ#1102629)
  - NagiosCfg: parse nrpe.cfg with Nrpe (RHBZ#1102623)
  - Rmt: add lens (RHBZ#1100549)
  - Services: permit colons in service name (RHBZ#1121527)
  - Shellvars: support arithmetic expansion (RHBZ#1100550)
  - Syslog: parse TCP loghosts (RHBZ#1129386)
  - Syslog: parse IPv6 loghost addresses (RHBZ#1129388)
  - Systemd: parse /etc/sysconfig/*.systemd (RHBZ#1083022)
  - Systemd: parse quoted environment vars (RHBZ#1100547)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-14
changelog:
  - Kdump: parse new options, EOL comments (RHBZ#1139298)
  - Rsyslog: parse property filters and templates (RHBZ#1138402)
  - Systemd: parse semicolons inside entry values (RHBZ#1139498)
  - Systemd: parse environment variables where value is quoted (RHBZ#1138508)


author: Dominic Cleal <dcleal@redhat.com> - 1.1.0-16
changelog:
  - Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
  - Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
  - Shadow: add lens (RHBZ#1145249)


author: Pino Toscano <ptoscano@redhat.com> - 1.4.0-9.el7_7.1
changelog:
  - Krb5: support realms that start with numbers; add more pkinit_* options;
    improve handling of [dbmodules]; allow include/includedir directives
    everywhere (RHBZ#1799021)


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.6-1
changelog:
  - add use_first_pass to pam_sss in password stack
  - more robust initialization of sssdConfig
  - check whether base DN value is a real base DN
  - use non-deprecated pam_pwquality option authtok_type= instead of type=
  - update lastlog for su


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.7-1
changelog:
  - samba-winbind-clients package contains the nsswitch and pam modules (#919117)
  - do not drop sss from nsswitch.conf on --update (#980861)
  - writing out smartcard/fingerprint auth policy to dconf (original patch by
    Ray Strode) (#990625)
  - document other possible return codes from authconfig invocation (#991804)
  - print error message if config file save fails (#994596)
  - never stop rpcbind (#990788)
  - do not disable sssd.service when --enablesssd is used (#953851)
  - revert use_first_pass addition to pam_sss in password stack (#953116)


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-1
changelog:
  - detect invalid LDAP uri and report error
  - fix handling of IPA domain join errors and uninstall
  - add support for winbind authentication over Kerberos 5
  - set umask=077 by default for pam_mkhomedir and pam_oddjob_mkhomedir
  - better error checking for password quality options


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-2
changelog:
  - updated translations
  - make pam_pkcs11 not ignore the wait_for_card option
  - gnome-screensaver does not exist anymore


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-7
changelog:
  - check nslcd for restart when --enableforcelegacy is used
  - call restorecon on newly created configuration files


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-8
changelog:
  - enable/start sssd only when config exists or enabled
    for both pam and nsswitch.conf
  - updated translations


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-9
changelog:
  - do not overwrite special ldap base values
  - display error message if winbind or IPA domain join fails
  - fix invocation of IPA domain join from GUI
  - keep altfiles in nsswitch.conf if present (#1134084)
  - the winbind client is now in samba-winbind package (#1084997)
  - correct handling of SSSD enablement during IPA domain joins
  - do not bail out if multiple LDAP URIs are specified (#1142830)


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-10
changelog:
  - fix title of IPA domain join window (#1166119)
  - add --unattended to IPA uninstall command (#1166131)
  - do not mistake comment for krb5 realm name (#1184639)
  - do not traceback with incorrect locales (#1187020)
  - correct the package needed for winbind (#1190226)
  - install empty /etc/sysconfig/authconfig file (#1194698)
  - let SSSD prompt non-local users for passwords (#1204864)
  - add includedir /var/lib/sss/pubconf/krb5.include.d/ to krb5.conf (#1207552)
  - pass the password provided by --winbindjoin to net join (#1225089)


author: Tomáš Mráz <tmraz@redhat.com> - 6.2.8-11
changelog:
  - add trigger to change pam configuration to use pam_oddjob_mkhomedir
    instead of pam_mkhomedir if oddjob-mkhomedir is installed
  - remove unusable --winbindtemplateprimarygroup option (#1242878)
  - handle inconsistency when missing realm in krb5.conf
  - sort the /etc/sysconfig/authconfig on write (#1320943)
  - avoid unnecessary update of nsswitch.conf
  - add support for myhostname nsswitch module (#1329943)


author: Pavel Březina <pbrezina@redhat.com> - 6.2.8-26
changelog:
  - CVE-2017-7488 authconfig: Information leak when SSSD is used for authentication against remote server (#1441604)


author: Tomas Mraz <tmraz@redhat.com> - 6.2.5-1
changelog:
  - fix missing cache_credentials option when saving sssd.conf
  - do not try to start/restart sssd with incomplete default domain
  - add autofs to sssd.conf activated services
  - add pam_winbind to session pam modules


author: Karsten Hopp <karsten@redhat.com> 2.69-2
changelog:
  - spec file changes by Ralf Corsépius:
  - Use %bcond_without for --with/out=check.
  - Add BR: perl(Data::Dumper).
  - Remove BR: automake (Testsuite doesn't need automake).
  - Add BR: gcc-gfortran, erlang (Extend testsuite).
  - Remove TESTSUITEFLAGS (Was referring to autoconf < 2.69).
  - Add rpm-4.9 perl-filters %__provides_exclude, %__requires_exclude.
    Remove rpm-4.8 perl-filters (Address RHBZ 823770).
  - Reflect autoconf being GPLv3'ed.
  - Add BR: perl-macros, Remove BR: perl-devel


author: Pavel Raiskup <praiskup@redhat.com> - 2.69-6
changelog:
  - fedora-review (minor) fixes and typos: trim lines, remove defattr(,,), do not
    run `rm -rf %{buildroot} at the beginning of install section, use curly
    brackets only around rpm macros/variables and not around shell variables,
    remove clean section


author: Pavel Raiskup <praiskup@redhat.com> - 2.69-8
changelog:
  - the 'INSTALL' file can be used as template file for packages which are using
    autoconf - mark it for installation again (#661623)


author: Caolán McNamara <caolanm@redhat.com> - 1:5.0.6.2-6
changelog:
  - Resolves: rhbz#1401082 gnome hangs opening certain docx
  - Resolves: rhbz#1421726 drop use of CAIRO_OPERATOR_DIFFERENCE


author: David Tardon <dtardon@redhat.com> - 1:5.0.6.2-7
changelog:
  - Resolves: rhbz#1431539 gnome-documents needs libreofficekit
  - Resolves: rhbz#1435535 CVE-2017-3157 Arbitrary file disclosure in
    Calc and Writer


author: Stephan Bergmann <sbergman@redhat.com> - 1:5.3.6.1-17
changelog:
  - Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
  - Resolves: rhbz#1610692 silence console warnings from print dialog


author: Ian Kent <ikent@redhat.com> - 5.0.7-96
changelog:
  - bz1598640 - Server availability probe broke tunneling nfs via localhost
    - remove some redundant rpc library code.
    - add port parameter to rpc_ping().
    - dont probe NFSv2 by default.
    - add version parameter to rpc_ping().
  - Resolves: rhbz#1598640


author: Ian Kent <ikent@redhat.com> - 5.0.7-97
changelog:
  - bz1358887 - On Red Hat 7.x systems if you try to access local
    filesystems using the automounter through /net then the shell
    and mount could lock up *if* the filesystem your accessing is
    double exported.
    - set bind mount as propagation slave.
    - add master map pseudo options for mount propagation.
  - Resolves: rhbz#1358887


author: Ian Kent <ikent@redhat.com> - 5.0.7-98
changelog:
  - bz1627502 - after upgrading to autofs-5.0.7-83.el7.x86_64 on RHEL 7 clients,
    amd maps /defaults key mount options are no longer working
    - fix amd parser opts option handling.
  - Resolves: rrhbz#1627502


author: Ian Kent <ikent@redhat.com> - 5.0.7-98
changelog:
  - bz1630189 - yum update hanging while restarting autofs
    - fix incorrect locking in sss lookup.
  -Resolves: rhbz#1630189


author: Ian Kent <ikent@redhat.com> - 5.0.7-100
changelog:
  - bz1599516 - [autofs] The log no longer print PID of automount process
    - add NULL check in prepare_attempt_prefix().
    - update build info with systemd.
    - use flags for startup boolean options.
    - move close stdio descriptors to become_daemon().
    - add systemd service command line option.
  - Resolves: rhbz#1599516


author: Ian Kent <ikent@redhat.com> - 5.0.7-101
changelog:
  - bz1640448 - path_resolution on an autofs managed path resets the timer. Can
    this be made configurable?
    - support strictexpire mount option.
  - Resolves: rhbz#1640448


author: Ian Kent <ikent@redhat.com> - 5.0.7-102
changelog:
  - bz1644910 - [RFE] Enable additional logging information for autofs
    - add NULL check for get_addr_string() return.
    - use malloc(3) in spawn.c.
    - add mount_verbose configuration option.
    - optionally log mount requestor process info.
    - log mount call arguments if mount_verbose is set.
  - Resolves: rhbz#1644910


author: Ian Kent <ikent@redhat.com> - 5.0.7-103
changelog:
  - bz1644933 - Segmentation fault in err_string_data_LHASH_COMP
    - openssl workaround.
  - Resolves: rhbz#1644933


author: Ian Kent <ikent@redhat.com> - 5.0.7-104
changelog:
  - bz1442063 - Parameter ghost not documented in the man pages
    - document ghost option in auto.master man page.
  - Resolves: rhbz#1442063


author: Ian Kent <ikent@redhat.com> - 5.0.7-105
changelog:
  - bz1680582 - Sanitize autofs logging
    - make expire remaining log level debug.
  - Resolves: rhbz#1680582


author: Ian Kent <ikent@redhat.com> - 5.0.7-106
changelog:
  - bz1685804 - autofs doesn't expand macros in amd map selectors
    - workaround getaddrinfo(3) ai_canonname bug.
    - improve hostname lookup error logging.
    - allow period following macro in selector value.
    - fix macro expansion in selector values.
  - Resolves: rhbz#1685804


author: Ian Kent <ikent@redhat.com> - 5.0.7-107
changelog:
  - bz1734057 - automount segfaults if a bad hosts entry is added
    in /etc/auto.master
    - fix reset flex scan buffer on init.
  - Resolves: rhbz#1734057


author: Ian Kent <ikent@redhat.com> - 5.0.7-108
changelog:
  - bz1728914 - getmntent returns additional "-hosts" entries when
    automounter is used with "hosts" map
    - remove unused function has_fstab_option().
    - remove unused function reverse_mnt_list().
    - remove a couple of old debug messages.
    - fix amd entry memory leak.
    - fix unlink_mount_tree() not umounting mounts.
    - add ignore mount option.
    - use ignore option for offset mounts as well.
    - add config option for "ignore" mount option
    - use bit flags for autofs mount types in mnt_list.
    - use mp instead of path in mnt_list entries.
    - always use PROC_MOUNTS to make mount lists.
    - add glibc getmntent_r().
    - use local getmntent_r in table_is_mounted().
    - refactor unlink_active_mounts() in direct.c.
    - don't use tree_is_mounted() for mounted checks.
    - use single unlink_umount_tree() for both direct and indirect mounts.
    - move unlink_mount_tree() to lib/mounts.c.
    - use local_getmntent_r() for unlink_mount_tree().
    - use local getmntent_r() in get_mnt_list().
    - use local getmntent_r() in tree_make_mnt_list().
  - Resolves: rhbz#1728914


author: Ian Kent <ikent@redhat.com> - 5.0.7-109
changelog:
  - bz1728914 - getmntent returns additional "-hosts" entries when
    automounter is used with "hosts" map
    - fix missing initialization of autofs_point flags.
  - Related: rhbz#1728914


author: Ian Kent <ikent@redhat.com> - 5.0.7-110
changelog:
  - bz1806514 - strictexpire option not set for offset mounts
    - also use strictexpire for offsets.
  - Resolves: rhbz#1806514


author: Ian Kent <ikent@redhat.com> - 5.0.7-111
changelog:
  - bz1806514 - strictexpire option not set for offset mounts
    - fix patch not applied.
  - Related: rhbz#1806514


author: Ian Kent <ikent@redhat.com> - 5.0.7-112
changelog:
  - bz1818664 - autofs cannot mount samba/cifs shares that end with a dollar sign
    - fix trailing dollar sun entry expansion.
  - Resolves: rhbz#1818664


author: Ian Kent <ikent@redhat.com> - 5.0.7-114
changelog:
  - bz1847762 - automount program crashes with "malloc(): invalid next size
    (unsorted)
    - initialize struct addrinfo for getaddrinfo() calls.
    - fix quoted string length calc in expandsunent().
    - fix autofs mount options construction.
  -Resolves: rhbz#1847762


author: Ian Kent <ikent@redhat.com> - 5.0.7-115
changelog:
  - bz1885511 - automount force unlink option (-F) does not work as expected
    on autofs-5.0.7-109.el7
    - fix direct mount unlink_mount_tree() path.
    - fix unlink mounts umount order.
  - bz1858586 - autofs share doesn't mount when using nobind over RDMA where
    nfs-server and nfs-client are the same systems
    - mount_nfs.c fix local rdma share not mounting.
  - Resolves: rhbz#1885511 rhbz#1858586


author: Ian Kent <ikent@redhat.com> - 5.0.7-116
changelog:
  - bz1885511 - automount force unlink option (-F) does not work as expected
    on autofs-5.0.7-109.el7
    - fix incorrect logical compare in unlink_mount_tree().
  - Related: rhbz#1885511


author: Ian Kent <ikent@redhat.com> - 5.0.7-116el7_9.1
changelog:
  - bz2107752 - autofs: send FAIL cmd/ioctl mess when encountering problems
    with mount trigger
    - fix kernel mount status notification.
  - Resolves: rhbz#2107752


author: Ian Kent <ikent@redhat.com> - 5.0.7-88
changelog:
  - bz1548922 - automount crashes due to segfault
    - fix changelog date on previous two entries.
  -Related: rhbz#1548922


author: Ian Kent <ikent@redhat.com> - 5.0.7-89
changelog:
  - bz1548922 - automount crashes due to segfault
    - and fix incorrect month in changelog entries.
  -Related: rhbz#1548922


author: Ian Kent <ikent@redhat.com> - 5.0.7-90
changelog:
  - bz1536526 - Ignore trailing slashes at the end of executable maps
    in auto.master config file
    - add man page note about extra slashes in paths.
  -Related: rhbz#1536526


author: Ian Kent <ikent@redhat.com> - 5.0.7-92
changelog:
  - bz1581502 - PID file never created or disappears
    - add units After line to include statd service.
    - use systemd sd_notify() at startup.
  -Resolves: rhbz#1581502


author: Ian Kent <ikent@redhat.com> - 5.0.7-93
changelog:
  - bz1581502 - PID file never created or disappears
    - add missing BuildRequires: systemd-devel.
    - fix changelog entry revision.
  -Related: rhbz#1581502


author: Ian Kent <ikent@redhat.com> - 5.0.7-94
changelog:
  - bz1609128 - autofs reload is unable to activate new map entries,
    it is autofs restart which shows new map entries.
    - fix update_negative_cache() map source usage.
  - Resolves: rhbz#1609128


author: Ian Kent <ikent@redhat.com> - 5.0.7-95
changelog:
  - bz1612914 - [autofs]Removed entries still can be accessed
    - mark removed cache entry negative.
  - Resolves: rhbz#1612914


author: Miroslav Lichvar <mlichvar@redhat.com> - 5.18-1
changelog:
  - Update to 5.18
  - Fix multilib conflicts (#831379)
  - Make some dependencies arch-specific
  - Remove obsolete macros


author: Pavel Raiskup <praiskup@redhat.com> - 1.13.1-13
changelog:
  - remove old build dependency comment
  - fix bogus dates in changelog
  - use the %{_smp_mflags} also by `make check`


author: Pavel Raiskup <praiskup@redhat.com> - 1.13.1-14
changelog:
  - fix another requirement on perl package which may cause problems in future,
    thanks to Paul Howarth (#924938)
  - f-r: remove Buildroot tag, fix license tag


author: Lorenzo Villani <lvillani@binaryhelix.net> - 1.0-0.10.rc2
changelog:
  - fix package summary and descriptions (as requested by Richard Hughes)
  - match cmake minimum required version with the contents of CMakeLists.txt
    (paranoid fix)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-15
changelog:
  - enable hardened build (#1092506)
  - fix short option for --version, document -t option of avahi-autoipd (#948583)
  - fix crashes in D-Bus methods GetAlternativeHostName and GetAlternativeServiceName (#1003688)
  - fix bug when avahi-daemon ended up in a tight loop (#1081801)
  - remove prefix /home/lennart/tmp/avahi from references in man pages (#1120233)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-17
changelog:
  - fix crash due to use of deprecated Gtk3 API (#1263720)
  - don't add 0pointer.de and zeroconf.org to default browse list (#1340837)
  - fix not publishing entries if a probing interface is removed (#1222646)


author: Michal Sekletar <msekleta@redhat.com> - 0.6.31-18
changelog:
  - create home directory for avahi-autoipd user (#1416287)
  - get rid of the dangling symlink to avahi-discover in debuginfo package (#1421229)


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:4.3-1
changelog:
  - Latest version
  - Split into two jars, provide backward compatible symlink
  - Cleanups according to new guidelines


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 0:2.1-6
changelog:
  - aqute-bndlib renamed to aqute-bnd (#745166)
  - Fix compilation with openjdk 1.7.0
  - Use new maven macros
  - Packaging tweaks


author: Nils Philippsen <nils@redhat.com> - 0.9.6-1
changelog:
  - version 0.9.6:
    * Backport r493-494: documentation typo fixes.
    * Make the CLDR import script work with Python 2.7.
    * Fix various typos.
    * Fixed Python 2.3 compatibility (ticket #146, #233).
    * Sort output of list-locales.
    * Make the POT-Creation-Date of the catalog being updated equal to
      POT-Creation-Date of the template used to update (ticket #148).
    * Use a more explicit error message if no option or argument (command) is
      passed to pybabel (ticket #81).
    * Keep the PO-Revision-Date if it is not the default value (ticket #148).
    * Make --no-wrap work by reworking --width's default and mimic xgettext's
      behaviour of always wrapping comments (ticket #145).
    * Fixed negative offset handling of Catalog._set_mime_headers (ticket #165).
    * Add --project and --version options for commandline (ticket #173).
    * Add a __ne__() method to the Local class.
    * Explicitly sort instead of using sorted() and don't assume ordering
      (Python 2.3 and Jython compatibility).
    * Removed ValueError raising for string formatting message checkers if the
      string does not contain any string formattings (ticket #150).
    * Fix Serbian plural forms (ticket #213).
    * Small speed improvement in format_date() (ticket #216).
    * Fix number formatting for locales where CLDR specifies alt or draft
      items (ticket #217)
    * Fix bad check in format_time (ticket #257, reported with patch and tests by
      jomae)
    * Fix so frontend.CommandLineInterface.run does not accumulate logging
      handlers (#227, reported with initial patch by dfraser)
    * Fix exception if environment contains an invalid locale setting (#200)
  - install python2 rather than python3 executable (#710880)


author: Akira TAGOH <tagoh@redhat.com> - 2.2-29
changelog:
  - Improve the fontconfig config file to match ko-kr as well. (#586306)
  - sync NVR and fixes from RHEL-6.
  - Update the priority.


author: Daiki Ueno <dueno@redhat.com> - 2.2-32
changelog:
  - Update the priority.
    nhn-nanum-fonts -> 65-0, un-core-fonts -> 65-1, baekmuk-ttf-fonts -> 65-2
  - Drop buildroot cleanup.
  - Drop %defattr(0644,root,root,0755) from %files.


author: Ondrej Holy <oholy@redhat.com> - 3.14.1-1
changelog:
  - Update to 3.14.1
  - Remove obsolete upstream patch
  - Add translations updates from upstream
  - Resolves: #1174557


author: Jaromir Capik <jcapik@redhat.com> - 20101219-2
changelog:
  - Java suffix removed from the package name and put in the summary instead
  - Version string added in the source URL (no need for manual renaming)
  - POM file added in the source package -> Source1 removed (no need for copying)
  - Removal of the target directory removed (not present anymore)


author: Ville Skyttä <ville.skytta@iki.fi> - 1:2.0-1
changelog:
  - Update to 2.0 (fixes #817902, #831835).
  - Don't try to python-bytecompile our non-python *.py (#813651).


author: Ville Skyttä <ville.skytta@iki.fi> - 1:2.1-1
changelog:
  - Update to 2.1 (fixes #860510, #906469, #912113, #919246, #928253).
  - Don't ship completions included in util-linux 2.23-rc2 for F-19+.


author: Roman Rakus <rrakus@redhat.com> - 2.1-4
changelog:
  - Added conditionals to not add completions for some commands; the packages
    has their own completions
    Resolves: #1007839


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.8-0.4.svn1230816
changelog:
  - Fix license tag
  - Install LICENSE and NOTICE with javadoc package
  - Remove RPM bug workaround
  - Update to current packaging guidelines


author: Jerome Marchand <jmarchan@redhat.com> - 0.6.1-1
changelog:
  - Rebase on v0.6.1
  - Fix tcpsubnet
  - Reinstate llcstat tool
  - Remove inject tool
  - Add NSS support to sslsniff
  - Fixes miscellaneous error uncovered by covscan


author: Jerome Marchand <jmarchan@redhat.com> - 0.10.0-1
changelog:
  - Rebase on bcc-0.10.0
  - Fix regression of vfscount
  - Drop tools that relies on features unavailable on RHEL 7


author: Ville Skyttä <ville.skytta@iki.fi> - 0:5.2-10
changelog:
  - Specify explicit source encoding to fix build with Java 7.
  - Install jar and javadocs unversioned.
  - Crosslink with JDK javadocs.


author: Andy Grimm <agrimm@gmail.com> - 0:5.2-13
changelog:
  - This package should not own _mavendepmapfragdir (RHBZ#850005)
  - Build with maven, and clean up deprecated spec constructs
  - Fix pom file (See http://jira.codehaus.org/browse/MEV-592)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.1
changelog:
  - Fix tsig-request verify (CVE-2020-8622)
  - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
  - Correct update-policy type subdomain to match documentation (CVE-2020-8624)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-26.P2.10
changelog:
  - Fix memory leak in ECDSA verify processing (CVE-2022-38177)
  - Fix memory leak in EdDSA verify processing (CVE-2022-38178)


author: Lizi Ekseulidze <lekseulidze@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els2
changelog:
  - CVE-2024-1737: add a limit to the number of RRs in RRSets
    and RR types for single name
  - CVE-2024-1975: remove support for SIG(0) message verification
  - Fix the SYSTEMTEST section in the spec file


author: Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els4
changelog:
  - CVE-2024-1737: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to
    override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES
  - Fix man8 pages for dnssec utils


author: Juan Carlos Garcia <jgarcia@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els8
changelog:
  - Remove bind-9.11.4-CVE-2023-4408.patch which introduces an ABI change that
    breaks bind-dyndb-ldap
  - Enforce that bind-dyndb-ldap is updated after ABI changes introduced in 9.11.4-26.P2.15
    update


author: Pavel Kopylov <pkopylov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els11
changelog:
  - CVE-2025-40778: reject forged records in answer sections to prevent
    cache poisoning via crafted responses
  - build tests improved


author: Viktor Borzov <vborzov@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els12
changelog:
  - CVE-2026-1519: limit NSEC3 iterations during DNSSEC insecure delegation
    validation to prevent excessive CPU consumption


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> - 33:9.11.4-26.P2.16.tuxcare.els13
changelog:
  - CVE-2026-3039: fix GSS-API resource leak in TKEY negotiation that could
    cause memory exhaustion (DoS)
  - CVE-2026-5946: disable recursion, UPDATE and NOTIFY for non-IN classes and
    reject ANY/NONE meta-classes to prevent assertion-failure crashes (DoS)


author: Stepan Broz <sbroz@redhat.com> - 32:9.11.4-26.P2.16
changelog:
  - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
    CVE-2023-50868)
  - Add missing design by contract tests to dns_catz*
  - Speed up parsing of DNS messages with many different names (CVE-2023-4408)
  - Do not use header_prev in expire_lru_headers


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2
changelog:
  - Limit number of queries triggered by a request (CVE-2020-8616)
  - Fix invalid tsig request (CVE-2020-8617)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.4-5
changelog:
  - Install configuration for rwtab and fix chroot setup script (#1028189)
  - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.4-7
changelog:
  - Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384)
  - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.4-8
changelog:
  - Split chroot package for named and named-sdb
  - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)


author: Petr Spacek <pspacek redhat com> - 6.0-2
changelog:
  - fix bug 1161635: send DNS NOTIFY message after any modification to the zone
  - fix bug 1168131: crash caused by interaction between forward and master zones


author: Petr Spacek <pspacek redhat com> - 7.99-1
changelog:
  - preliminary update to latests snapshot of upstream Git: 158e95e (#1204110)
  - resolves: #829395  DNSSEC support
  - resolves: #1139776 LDAP MODRDN (rename) is not supported
  - resolves: #1139778 Records deleted when connection to LDAP is down are not refreshed properly
  - resolves: #1184065 PTR record synchronization for A/AAAA record tuple can fail mysteriously
  - resolves: #1207539 Add support for TLSA resource records (DANE)
  - resolves: #1207540 Plugin will crash if idnsForwardZone object is in the wrong place
  - resolves: #1207541 Generic support for unknown DNS RR types (RFC 3597)


author: Petr Spacek <pspacek redhat com> - 8.0-1
changelog:
  - update to latest upstream version
  - resolves: #1204110 Rebase bind-dyndb-ldap to latest upstream version


author: Petr Spacek <pspacek@redhat.com> - 9.0-1
changelog:
  - update to latest upstream version
  - related: #1292145 Rebase bind-dyndb-ldap to latest upstream version


author: Petr Spacek <pspacek@redhat.com> - 10.0-1
changelog:
  - update to latest upstream version
  - resolves: #1292145 Rebase bind-dyndb-ldap to latest upstream version


author: Tomas Krizek <tkrizek@redhat.com> - 11.1-1
changelog:
  - update to letest upstream version
  - resolves: #1393889 Rebase to bind-dyndb-ldap 11+
  - resolves: #1165796 bind-dyndb-ldap crashes if server is shutting down and connection to LDAP is down
  - resolves: #1413805 bind-dyndb-ldap default schema is shipped with syntax error


author: Petr Menšík <pemensik@redhat.com> - 11.1-6
changelog:
  - Bump BIND version and fix library dependecies
  - Rebuild for bind 9.11.3. Minor tweaks to compile.
  - Support for bind 9.11.5 headers


author: Petr Spacek <pspacek redhat com> - 5.2-1
changelog:
  - update to 5.2
  - adds DNSSEC support and supports root zone in LDAP
  - idnsZoneActive attribute is not supported anymore


author: Nick Clifton <nickc@redhat.com> 2.27-34.base
changelog:
  - Fix seg-fault parsing corrupt AOUT format files.  (#1579799)
  - Fix seg-fault parsing corrupt DWARF2 debug information.  (#1579802)
  - Fix seg-fault parsing corrupt ELF format files.  (#1579801)


author: Nick Clifton <nickc@redhat.com> 2.27-41.base.1
changelog:
  - Stop the BFD library from complaining about multiple reloc sections for the same code section.  (#1755779)


author: Nick Clifton <nickc@redhat.com> - 2.27-41.base.3
changelog:
  - Allow the BFD library to handle the copying of files containing secondary reloc sections.  (#1804149)


author: Nick Clifton <nickc@redhat.com> 2.27-33.base
changelog:
  - Fix seg-fault parsing ELF files.  (#1578979)
  - Fix seg-fault parsing DWARF-2 information.  (#1579065)
  - Fix seg-fault parsing DWARF-2 information.  (#1579051)
  - Fix seg-fault parsing a PE format file.  (#1579019)


author: Nick Clifton <nickc@redhat.com> 2.27-42.base
changelog:
  - Stop the BFD library from complaining about sections with multiple sets of relocations.  (#1749085)


author: Nick Clifton <nickc@redhat.com> - 2.27-43.base.1
changelog:
  - Allow the BFD library to handle the copying of files containing secondary reloc sections.  (#1804151)


author: Nick Clifton <nickc@redhat.com> 2.27-44.base
changelog:
  - Allow the BFD library to handle the copying of files which contain secondary reloc sections.  (#1785294)
  - Implement assembler workaround for Intel JCC microcode bug.  (#1778892)


author: Dmitrii Samoilov <dsamoilov@cloudlinux.com> 2.27-44.base.1.tuxcare.els1
changelog:
  - CVE-2017-16831: Fix excessive memory allocation attempts and possible integer
    overflows when attempting to read a COFF binary with a corrupt symbol count
  - CVE-2020-19726: Fix parsing a corrupt PE format file
  - CVE-2021-45078: Fix out-of-bounds write in stab_xcoff_builtin_type
  - CVE-2021-46174: Fix buffer overflow in read_section_stabs_debugging_info
  - CVE-2022-44840: Fix possible heap buffer overflow in find_section_in_set() in readelf.c
  - CVE-2022-45703: Combine sanity checks, calculate element counts, not word
    counts, fix typo
  - CVE-2022-47695: Test symbol flags to exclude section and synthetic symbols
    before attempting to check flavour
  - CVE-2022-47696: Fix uninitialised field `the_bfd` of `asymbol`
  - CVE-2022-47673: Fix lack of bounds checking in vms-alpha.c


author: Pavel Kopylov <pkopylov@cloudlinux.com> 2.27-44.base.1.tuxcare.els4
changelog:
  - CVE-2025-11082: fix heap buffer overflow in _bfd_elf_parse_eh_frame
  - CVE-2025-5244: fix NULL deref in elf_gc_sweep for empty SEC_GROUP
  - CVE-2025-5245: fix SEGV in debug_type_samep / debug_write_type
  - CVE-2025-7545: fix heap buffer issue in objcopy copy_section
  - CVE-2025-7546: fix corrupted group section handling in elf.c


author: Pavel Kopylov <pkopylov@cloudlinux.com> 2.27-44.base.1.tuxcare.els5
changelog:
  - CVE-2026-3441: fix updated, heap OOB read fixed (bfd/xcofflink.c)
  - CVE-2026-3442: fix updated, OOB read fixed (bfd/xcofflink.c)


author: Vladimir D. Seleznev <vseleznev@cloudlinux.com> 2.27-44.base.1.tuxcare.els6
changelog:
  - CVE-2025-66862: fix buffer overflow in gnu_special cplus-dem.c
  - CVE-2025-66863: fix denial of service in d_discriminator cp-demangle.c
  - CVE-2025-66865: fix denial of service in d_print_comp_inner cp-demangle.c


author: Václav Pavlín <vpavlin@redhat.com> - 0.5.0-5
changelog:
  - Fix regression introduced by the addslot function
  - CoverityScan fixes
  - Place udev rules to /usr/lib rather than /lib
  Resolves: rhbz#1008899


author: Michal Sekletár <msekleta@redhat.com> - 0.7.3-2
changelog:
  - prevent infinite recursion in dmidecode.c::smbios_setslot (#1642706)
  - fix indentation in the man page (#1642706)


author: Patsy Franklin <pfrankli@redhat.com> - 3.0.4-1
changelog:
  - Rebase to 3.0.4
    - Removed obsolete patch.
    - Added build require of flex so that tests will run.
    - Removed duplicate/unpackaged files.


author: Pravin Satpute <psatpute@redhat.com> - 0.3-13
changelog:
  - added lucida-typewriter and fixed subpackage
  - removed common subpackage
  - added conf file for each subpackage


author: Jakub Martisko <jamartis@redhat.com> - 3.4.2-7
changelog:
  - fix issue with creation of srpm where __isa_bits on noarch leads to an error
  - Related: rhbz#1176026


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.3-1
changelog:
  - Don't crash if blockdev mpath plugin isn't available. (#1672971) (dlehman)
  - iscsi: Add default value to unused 'storage' argument in 'write' (vtrefny)
  - Add exported property to LVMVolumeGroupDevice (vtrefny)
  - Add VG data to static_data (vtrefny)
  - Do not try to get format free space for non-existing formats (vtrefny)
  - Do not raise exception if can't get PV free space (vtrefny)
  - Fix undefined attribute in LVM info cache (vtrefny)
  - Use raw_device to get thinpool device in LVMThinPFactory (#1490174) (vtrefny)
  - Do not crash if DM RAID activation fails (#1661712) (vtrefny)
  - Remove the unused sysroot property (vponcova)
  - Remove unused attributes from the Blivet class (vponcova)
  - Remove the unused gpt flag (vponcova)
  - Copy the iSCSI initiator name file to the installed system (vtrefny)
  - Use udev to determine if disk is a multipath member. (dlehman)
  - Require libfc instead of fcoe for offloaded FCoE. (#1575953) (dlehman)


author: Pavel Cahyna <pcahyna@redhat.com> - 3.1.3-2
changelog:
  - Initial import of python-blivet3 by David Lehman <dlehman@redhat.com>
    derived from python-blivet-3.1.2-1
  - clear the old python-blivet %changelog except the most recent entry.


author: David Lehman <dlehman@redhat.com> - 3.1.3-3
changelog:
  - spec file requires fixes from pcahyna
  - adjust to older pyudev API
  - adjust tags implementation to absence of enum in python-2.7
  - fix bare imports in example scripts
  - update factory example to match latest API


author: Eric Sandeen <sandeen@redhat.com> - 1.0.5-7
changelog:
  - Add upstream cpu scalability patches (#1032368)
  - Remove "-k" option from manpage (#1300354)
  - Fix potential deadlock when calling stop_tracers (#1263189)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.1.0-1
changelog:
  - New version
  - Dropped office_scen patch (upstreamed)
  - Dropped hdparm patch (upstream added support for LVM)
  - Reworked rm_sudo patch


author: Ray Strode <rstrode@redhat.com> 1.3-5
changelog:
  - Rebuild against bluez5.  This won't work, but will
    at least prevent broken dependencies
    Related: #1174545 1219504


author: Don Zickus <dzickus@redhat.com> 5.41-1
changelog:
  - Update to 5.41
  - obexd fixes to prevent crashes
  - add /etc/bluetooth/main.conf config file
  Resolves: #1313363, #1336476, #1338895


author: David Arcari <darcari@redhat.com> 5.44-1
changelog:
  - Update to 5.44
  - Ship btattach tool
  - Configure systemctl settings for bluez-obex correctly
  - Add Provides: bluez-obexd
  Resolves: #1434581, #1401501


author: Bastien Nocera <bnocera@redhat.com> 4.101-4
changelog:
  - Clean up requires and build requires
  - Use CUPS macro (#772236)
  - Enable audio socket so a2dp works in PulseAudio again (#874015)
  - Fix hid2hci not working with recent kernels (#877998)


author: Boris Ranto <branto@redhat.com> - 0:1.8.15-7
changelog:
  - New release (0:1.8.15-7)
  - ID:437 - sel: Fix "sel time set <time>"
  - ID 408 - fix sel list last X listing


author: Josef Ridky <jridky@redhat.com> - 0:1.8.18-3
changelog:
  - Fix issues with warning: dereferencing type-punned pointer 
    will break strict-aliasing rules from RPMDiff


author: Pavel Cahyna <pcahyna@redhat.com> - 0:1.8.18-10
changelog:
  - Protect against negative values to memmove that caused
    "ipmitool sol activate" to crash against an IBM DataPower appliance
    (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
    Cherry-picked from upstream PR#78.


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-11
changelog:
  - Add upstream ipmievd patch to check received msg id against expectation
    Fixes problem where SEL response is not recognized correctly
    when SEL request times out
    Resolves: rhbz#2224569


author: Christian Kellner <ckellner@redhat.com> - 0.7-1
changelog:
  - bolt 0.7 release with pre-bootacl support.
    Resolves: #1629713
  - Patch to fix a format string bug in the 0.7
  - Drop restricting-capabilities.patch (included in 0.7)
  - Patch to not use unsuppported unit file settings.
    Resolves: #1631050


author: Petr Machata <pmachata@redhat.com> - 1.53.0-13
changelog:
  - Fix compilation of Boost.Pool test cases
    (boost-1.54.0-pool-test_linking.patch)
  - Fix -Wshadow warnings in Boost.Pool
    (boost-1.54.0-pool-max_chunks_shadow.patch)
   -Wshadow warnings in Boost.Thread
    (boost-1.54.0-thread-cond_variable_shadow.patch)


author: Petr Machata <pmachata@redhat.com> - 1.53.0-15
changelog:
  - Fix misunderstanding of Boost.MPI about widths of some
    Boost.Serialization types.  (boost-1.53.0-mpi-version_type.patch)


author: Petr Machata <pmachata@redhat.com> - 1.53.0-18
changelog:
  - Turn off build flags pre-set by Boost distribution.
    (boost-1.53.0-buildflags.patch)
  - Pass RPM_OPT_FLAGS through user-config.jam.


author: Petr Machata <pmachata@redhat.com> - 1.53.0-21
changelog:
  - Fix atomic_cas32 (thanks Jaroslav Škarvada for figuring out where
    the problem is) (boost-1.54.0-interprocess-atomic_cas32-ppc.patch)


author: Jonathan Wakely <jwakely@redhat.com> - 1.53.0-26
changelog:
  - do not use arch-specific BuildRequires (#1268268)
  - support TLS libraries without SSLv3 (#1298227)


author: Jonathan Wakely <jwakely@redhat.com> - 1.53.0-26
changelog:
  - Install unpatched gcc.jam (#1305019).
  - Build libboost_python and libboost_python3 such that they depend on
    their respective libpython (#1302120).
    (boost-1.53.0-python-libpython_dep.patch,
    boost-1.53.0-python-abi_letters.patch)
  - Fix Boost.Python test suite so that PyImport_AppendInittab is called
    before PyInitialize, which broke the test suite with Python 3.
    (boost-1.53.0-python-test-PyImport_AppendInittab.patch)
  - Patch gcc.jam to not add bogus rpaths.


author: Petr Sabata <contyk@redhat.com> - 1.5-1
changelog:
  - 1.5 bump
  - BuildRoot and defattr cleanup
  - Use macros in Sources
  - Drop show-ports and foreach patches -- those have been included upstream


author: Petr Sabata <contyk@redhat.com> - 1.5-2
changelog:
  - Add three latest bugfixes from upstream git on top of 1.5
  - Dropping params patch (included upstream variant)


author: Jon Ciesla <limburgher@gmail.com> - 4.5-5
changelog:
  - Add systemd unit file, BZ 916628.
  - Drop spurious post scripts.
  - Move eveything but man pages and license files top -docs.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-10
changelog:
  - Hardened build
    Resolves: rhbz#1092547
  - Fixed Braille display emulator to start
    Resolves: rhbz#1304725


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-11
changelog:
  - Fixed Braille characters not displaying in the XW driver window
    Resolves: rhbz#1324669
  - Added AT-SPI2 driver
    Resolves: rhbz#1324672
  - Fixed requirements
    Resolves: rhbz#1324850


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-12
changelog:
  - Improved fix for Braille characters not displaying in the XW driver window
    Related: rhbz#1324669


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-13
changelog:
  - Made brltty-config executable, currently useless, but FHS compliant
    Resolves: rhbz#1332981
  - Fixed multilib
    Related: rhbz#1324850


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-14
changelog:
  - Rebuilt for new architectures
    Resolves: rhbz#1379884
  - Added fix to support compilation with ocaml-4.04.0
    Resolves: rhbz#1393750


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.5-15
changelog:
  - Fixed build in case ocaml is preinstalled in the build root and
    support shouldn't be built
    Resolves: rhbz#1443907


author: Pavel Raiskup <praiskup@redhat.com> - 3.1.2-11
changelog:
  - fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
  - fix crash on crafted 7zip archives (CVE-2019-1000019)
  - fix infinite loop in ISO9660 (CVE-2019-1000020)


author: Pavel Raiskup <praiskup@redhat.com> - 3.0.4-3
changelog:
  - better install manual pages for libarchive/bsdtar/bsdcpio (# ... )
  - several fedora-review fixes ...:
  - Source0 has moved to github.com
  - remove trailing white spaces
  - repair summary to better describe bsdtar/cpiotar utilities


author: David Tardon <dtardon@redhat.com> - 0:1.3.0-22
changelog:
  - Resolves: rhbz#850008 bsh - Should not own /usr/share/maven-fragments
    directory
  - Resolves: rhbz#878163 bsh - javadoc subpackage doesn't require
    jpackage-utils
  - Resolves: rhbz#878166 bsh: Public Domain not listed in license tag


author: Rahul Sundaram <sundaram@fedoraproject.org> - 0:1.3.0-24
changelog:
  - remove vendor tag from desktop file. https://fedorahosted.org/fpc/ticket/247
  - clean up spec to follow current guidelines


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.3.0-27
changelog:
  - Remove arch-specific conditionals
  - Remove group tags
  - Remove Requires on jpackage-utils
  - Remove Requires on coreutils
  - Generate custom scripts with %jpackage_script
  - Install versionless JARs only
  - Install POM files to %{_mavenpomdir}


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.3.0-27
changelog:
  - Use %add_maven_depmap instead of legacy macros
  - Install versionless javadocs
  - Remove old Obsoletes
  - Update and format descriptions
  - Install license file with manual and javadoc packages
  - Fix Requires and BuildRequires on java
  - Fix calls to %jpackage_script


author: Eric Sandeen <sandeen@redhat.com> 0.20.rc1.20130917git194aa4a-1
changelog:
  - New upstream snapshot
  - Deprecated btrfsctl, btrfs-show, and btrfs-vol; still available in btrfs cmd


author: Petr Machata <pmachata@redhat.com> - 1.9.20111219-1
changelog:
  - Rebase to 20111219
    - add "-s" option
    - Resolves: #769237
  - Revert default stack size to 10000
    - Related: #743343


author: Azat Nurgaliev <anurgaliev@cloudlinux.com> - 1.0.6-13.tuxcare.els1
changelog:
  - CVE-2019-12900: fix out-of-bounds write in BZ2_decompress when many
    selectors are present
  - CVE-2016-3189: fix use-after-free in bzip2recover


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.5.1-12
changelog:
  - Patch for failure to gpg sign commits with no gpg-agent 
    https://bugzilla.redhat.com/show_bug.cgi?id=905087


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-5
changelog:
  - Apply a patch by Stephen Gallagher to patch autoconf, not configure to
    allow optflags to be passed in by build environment
  - Run autoreconf before configure
  - git rm obsolete patches
  - Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-1
changelog:
  - New upstream release 1.10
  - Obsolete upstreamed patches
  - Amend the multilib patch, there's no need to patch configure since we
    are running autoreconf anyways
  - https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES


author: Kai Engert <kaie@redhat.com> - 2017.2.11-71
changelog:
  - Update to CKBI 2.11 from NSS 3.28.1 with legacy modifications.
  - Use comments in extracted bundle files.
  - Change packaging script to support empty legacy bundles.


author: Kai Engert <kaie@redhat.com> - 2017.2.11-72
changelog:
  - Changed the packaged bundle to use the flexible p11-kit-object-v1 file format,
    as a preparation to fix bugs in the interaction between p11-kit-trust and
    Mozilla applications, such as Firefox, Thunderbird etc.
  - For CAs trusted by Mozilla, set attribute nss-mozilla-ca-policy: true
  - Require p11-kit 0.23.5
  - Added an utility to help with comparing output of the trust dump command.


author: Kai Engert <kaie@redhat.com> - 2017.2.16-71
changelog:
  - Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,
    Mozilla removed code signing trust from all CAs (rhbz#1472933)


author: Bob Relyea <rrelyea@redhat.com> - 2019.2.32-76
changelog:
  - Update to CKBI 2.32 from NSS 3.44
  -   Removing:
  -   # Certificate "Visa eCommerce Root"
  -   # Certificate "AC Raiz Certicamara S.A."
  -   # Certificate "TC TrustCenter Class 3 CA II"
  -   # Certificate "ComSign CA"
  -   # Certificate "S-TRUST Universal Root CA"
  -   # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
  -   # Certificate "Certplus Root CA G1"
  -   # Certificate "Certplus Root CA G2"
  -   # Certificate "OpenTrust Root CA G1"
  -   # Certificate "OpenTrust Root CA G2"
  -   # Certificate "OpenTrust Root CA G3"
  -  Adding:
  -   # Certificate "GlobalSign Root CA - R6"
  -   # Certificate "OISTE WISeKey Global Root GC CA"
  -   # Certificate "GTS Root R1"
  -   # Certificate "GTS Root R2"
  -   # Certificate "GTS Root R3"
  -   # Certificate "GTS Root R4"
  -   # Certificate "UCA Global G2 Root"
  -   # Certificate "UCA Extended Validation Root"
  -   # Certificate "Certigna Root CA"
  -   # Certificate "emSign Root CA - G1"
  -   # Certificate "emSign ECC Root CA - G3"
  -   # Certificate "emSign Root CA - C1"
  -   # Certificate "emSign ECC Root CA - C3"
  -   # Certificate "Hongkong Post Root CA 3"


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-70.0
changelog:
  - Update to CKBI 2.41 from NSS 3.53.0
  -    Removing:
  -     # Certificate "AddTrust Low-Value Services Root"
  -     # Certificate "AddTrust External Root"
  -     # Certificate "UTN USERFirst Email Root CA"
  -     # Certificate "Certplus Class 2 Primary CA"
  -     # Certificate "Deutsche Telekom Root CA 2"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "Certinomis - Root CA"
  -    Adding:
  -     # Certificate "Entrust Root Certification Authority - G4"
  - fix permissions on ghosted files.


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.48-71
changelog:
  - Update to CKBI 2.48 from NSS 3.66
  -    Removing:
  -     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root CA"
  -     # Certificate "Sonera Class 2 Root CA"
  -     # Certificate "Taiwan GRCA"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Trustis FPS Root CA"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
  -    Adding:
  -     # Certificate "Microsoft ECC Root Certificate Authority 2017"
  -     # Certificate "Microsoft RSA Root Certificate Authority 2017"
  -     # Certificate "e-Szigno Root CA 2017"
  -     # Certificate "certSIGN Root CA G2"
  -     # Certificate "Trustwave Global Certification Authority"
  -     # Certificate "Trustwave Global ECC P256 Certification Authority"
  -     # Certificate "Trustwave Global ECC P384 Certification Authority"
  -     # Certificate "NAVER Global Root Certification Authority"
  -     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
  -     # Certificate "GlobalSign Secure Mail Root R45"
  -     # Certificate "GlobalSign Secure Mail Root E45"
  -     # Certificate "GlobalSign Root R46"
  -     # Certificate "GlobalSign Root E46"
  -     # Certificate "GLOBALTRUST 2020"
  -     # Certificate "ANF Secure Server Root CA"
  -     # Certificate "Certum EC-384 CA"
  -     # Certificate "Certum Trusted Root CA"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-71
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "GlobalSign Root CA - R2"
  -     # Certificate "Cybertrust Global Root"
  -     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
  -    Adding:
  -     # Certificate "TunTrust Root CA"
  -     # Certificate "HARICA TLS RSA Root CA 2021"
  -     # Certificate "HARICA TLS ECC Root CA 2021"
  -     # Certificate "HARICA Client RSA Root CA 2021"
  -     # Certificate "HARICA Client ECC Root CA 2021"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "vTrus ECC Root CA"
  -     # Certificate "vTrus Root CA"
  -     # Certificate "ISRG Root X2"
  -     # Certificate "HiPKI Root CA - G1"
  -     # Certificate "Telia Root CA v2"
  -     # Certificate "D-TRUST BR Root CA 1 2020"
  -     # Certificate "D-TRUST EV Root CA 1 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-72
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Adding:
  -     # Certificate "CAEDICOM Root"
  -     # Certificate "I.CA Root CA/RSA"
  -     # Certificate "MULTICERT Root Certification Authority 01"
  -     # Certificate "Certification Authority of WoSign G2"
  -     # Certificate "CA WoSign ECC Root"
  -     # Certificate "CCA India 2015 SPL"
  -     # Certificate "Swedish Government Root Authority v3"
  -     # Certificate "Swedish Government Root Authority v2"
  -     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "OpenTrust Root CA G2"
  -     # Certificate "OpenTrust Root CA G3"
  -     # Certificate "Certplus Root CA G1"
  -     # Certificate "Certplus Root CA G2"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Thailand National Root Certification Authority - G1"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Certification Authority of WoSign"
  -     # Certificate "CA 沃通根证书"
  -     # Certificate "SSC GDL CA Root B"
  -     # Certificate "SAPO Class 2 Root CA"
  -     # Certificate "SAPO Class 3 Root CA"
  -     # Certificate "SAPO Class 4 Root CA"
  -     # Certificate "CA Disig Root R1"
  -     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
  -     # Certificate "ApplicationCA2 Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Halcom Root CA"
  -     # Certificate "Swisscom Root EV CA 2"
  -     # Certificate "CFCA GT CA"
  -     # Certificate "Digidentity L3 Root CA - G2"
  -     # Certificate "SITHS Root CA v1"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "IGC/A AC racine Etat francais"
  -     # Certificate "PersonalID Trustworthy RootCA 2011"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "Swiss Government Root CA II"
  -     # Certificate "Swiss Government Root CA I"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "LuxTrust Global Root"
  -     # Certificate "AC1 RAIZ MTIN"
  -     # Certificate "Microsoft Root Certificate Authority 2011"
  -     # Certificate "CCA India 2011"
  -     # Certificate "ANCERT Certificados Notariales V2"
  -     # Certificate "ANCERT Certificados CGN V2"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "China Internet Network Information Center EV Certificates Root"
  -     # Certificate "Verizon Global Root CA"
  -     # Certificate "SwissSign Silver Root CA - G3"
  -     # Certificate "SwissSign Platinum Root CA - G3"
  -     # Certificate "SwissSign Gold Root CA - G3"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "SITHS CA v3"
  -     # Certificate "Certinomis - Autorité Racine"
  -     # Certificate "ANF Server CA"
  -     # Certificate "Thawte Premium Server CA"
  -     # Certificate "Thawte Server CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "KEYNECTIS ROOT CA"
  -     # Certificate "I.CA - Standard Certification Authority, 09/2009"
  -     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
  -     # Certificate "VI Registru Centras RCSC (RootCA)"
  -     # Certificate "CCA India 2007"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Actalis Authentication CA G1"
  -     # Certificate "A-Trust-Qual-03"
  -     # Certificate "AddTrust External CA Root"
  -     # Certificate "ECRaizEstado"
  -     # Certificate "Configuration"
  -     # Certificate "FNMT-RCM"
  -     # Certificate "StartCom Certification Authority"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "E-ME SSI (RCA)"
  -     # Certificate "ACEDICOM Root"
  -     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
  -     # Certificate "Correo Uruguayo - Root CA"
  -     # Certificate "CNNIC ROOT"
  -     # Certificate "Common Policy"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "Cisco Root CA 2048"
  -     # Certificate "CA Disig"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "UCA Global Root"
  -     # Certificate "UCA Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Starfield Services Root Certificate Authority"
  -     # Certificate "I.CA - Qualified root certificate"
  -     # Certificate "I.CA - Standard root certificate"
  -     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
  -     # Certificate "Japanese Government"
  -     # Certificate "AdminCA-CD-T01"
  -     # Certificate "Admin-Root-CA"
  -     # Certificate "Izenpe.com"
  -     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
  -     # Certificate "Halcom CA FO"
  -     # Certificate "Halcom CA PO 2"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "ACNLB"
  -     # Certificate "state-institutions"
  -     # Certificate "state-institutions"
  -     # Certificate "SECOM Trust Systems CO.,LTD."
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "D-TRUST Root Class 2 CA 2007"
  -     # Certificate "D-TRUST Root Class 3 CA 2007"
  -     # Certificate "SSC Root CA A"
  -     # Certificate "SSC Root CA B"
  -     # Certificate "SSC Root CA C"
  -     # Certificate "Autoridad de Certificacion de la Abogacia"
  -     # Certificate "Root CA Generalitat Valenciana"
  -     # Certificate "VAS Latvijas Pasts SSI(RCA)"
  -     # Certificate "ANCERT Certificados CGN"
  -     # Certificate "ANCERT Certificados Notariales"
  -     # Certificate "ANCERT Corporaciones de Derecho Publico"
  -     # Certificate "GLOBALTRUST"
  -     # Certificate "Certipost E-Trust TOP Root CA"
  -     # Certificate "Certipost E-Trust Primary Qualified CA"
  -     # Certificate "Certipost E-Trust Primary Normalised CA"
  -     # Certificate "Cybertrust Global Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "IGC/A"
  -     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "Swisscom Root CA 1"
  -     # Certificate "Microsec e-Szigno Root CA"
  -     # Certificate "LGPKI"
  -     # Certificate "AC RAIZ DNIE"
  -     # Certificate "Common Policy"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 1"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Staat der Nederlanden Root CA"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Global CA 2"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root Certification Authority"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Microsoft Root Authority"
  -     # Certificate "Microsoft Root Certificate Authority"
  -     # Certificate "Microsoft Root Certificate Authority 2010"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "UTN-USERFirst-Object"
  -     # Certificate "BYTE Root Certification Authority 001"
  -     # Certificate "CISRCA1"
  -     # Certificate "ePKI Root Certification Authority - G2"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "SSL.com EV Root Certification Authority RSA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "ACA ROOT"
  -     # Certificate "Security Communication ECC RootCA1"
  -     # Certificate "Security Communication RootCA3"
  -     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
  -     # Certificate "Network Solutions RSA Certificate Authority"
  -     # Certificate "Network Solutions ECC Certificate Authority"
  -     # Certificate "Australian Defence Public Root CA"
  -     # Certificate "SI-TRUST Root"
  -     # Certificate "Halcom Root Certificate Authority"
  -     # Certificate "Application CA G3 Root"
  -     # Certificate "GLOBALTRUST 2015"
  -     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
  -     # Certificate "emSign Root CA - G2"
  -     # Certificate "emSign Root CA - C2"
  -     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
  -     # Certificate "DigiCert CS ECC P384 Root G5"
  -     # Certificate "DigiCert CS RSA4096 Root G5"
  -     # Certificate "DigiCert RSA4096 Root G5"
  -     # Certificate "DigiCert ECC P384 Root G5"
  -     # Certificate "HARICA Code Signing RSA Root CA 2021"
  -     # Certificate "HARICA Code Signing ECC Root CA 2021"
  -     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-74
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "Izenpe.com"
  -     # Certificate "state-institutions"
  -     # Certificate "GlobalSign"
  -     # Certificate "Common Policy"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "AC Raíz Certicámara S.A."


author: Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-71
changelog:
  - Update to CKBI 2.60_v7.0.306 from NSS 3.91
  -    Removing:
  -     # Certificate "Camerfirma Global Chambersign Root"
  -     # Certificate "Staat der Nederlanden EV Root CA"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "CCA India 2007"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -    Adding:
  -     # Certificate "DigiCert TLS ECC P384 Root G5"
  -     # Certificate "DigiCert TLS RSA4096 Root G5"
  -     # Certificate "DigiCert SMIME ECC P384 Root G5"
  -     # Certificate "DigiCert SMIME RSA4096 Root G5"
  -     # Certificate "Certainly Root R1"
  -     # Certificate "Certainly Root E1"
  -     # Certificate "E-Tugra Global Root CA RSA v3"
  -     # Certificate "E-Tugra Global Root CA ECC v3"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
  -     # Certificate "BJCA Global Root CA1"
  -     # Certificate "BJCA Global Root CA2"
  -     # Certificate "Symantec Enterprise Mobile Root for Microsoft"
  -     # Certificate "A-Trust-Root-05"
  -     # Certificate "ADOCA02"
  -     # Certificate "StartCom Certification Authority G2"
  -     # Certificate "ATHEX Root CA"
  -     # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "America Online Root Certification Authority 1"
  -     # Certificate "Juur-SK"
  -     # Certificate "ComSign CA"
  -     # Certificate "ComSign Secured CA"
  -     # Certificate "ComSign Advanced Security CA"
  -     # Certificate "Global Chambersign Root"
  -     # Certificate "Sonera Class2 CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "VeriSign, Inc."
  -     # Certificate "GTE CyberTrust Global Root"
  -     # Certificate "Equifax Secure Global eBusiness CA-1"
  -     # Certificate "Equifax"
  -     # Certificate "Class 1 Primary CA"
  -     # Certificate "Swiss Government Root CA III"
  -     # Certificate "Application CA G4 Root"
  -     # Certificate "SSC GDL CA Root A"
  -     # Certificate "GlobalSign Code Signing Root E45"
  -     # Certificate "GlobalSign Code Signing Root R45"
  -     # Certificate "Entrust Code Signing Root Certification Authority - CSBR1"


author: Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-72
changelog:
  - hand merge the two 'GlobalSign ECC Root CA R4' certs together and the two 'AC RAIZ FNMT-RCM' certs together to keep p11kit from getting confused.


author: Pavel Kopylov <pkopylov@cloudlinux.com> - 2024.2.69_v7.0.306-72.tuxcare.els1
changelog:
  - update to CKBI 2.69 from NSS 3.103
  - updated certificates:
  -     # Certificate "GLOBALTRUST 2020"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "GlobalSign Root CA"
  -     # Certificate "Entrust.net Premium 2048 Secure Server CA"
  -     # Certificate "Baltimore CyberTrust Root"
  -     # Certificate "Entrust Root Certification Authority"
  -     # Certificate "Certum Root CA"
  -     # Certificate "Comodo AAA Services root"
  -     # Certificate "QuoVadis Root CA 2"
  -     # Certificate "QuoVadis Root CA 3"
  -     # Certificate "XRamp Global CA Root"
  -     # Certificate "Go Daddy Class 2 CA"
  -     # Certificate "Starfield Class 2 CA"
  -     # Certificate "DigiCert Assured ID Root CA"
  -     # Certificate "DigiCert Global Root CA"
  -     # Certificate "DigiCert High Assurance EV Root CA"
  -     # Certificate "SwissSign Gold CA - G2"
  -     # Certificate "SwissSign Silver CA - G2"
  -     # Certificate "SecureTrust CA"
  -     # Certificate "Secure Global CA"
  -     # Certificate "COMODO ECC Certification Authority"
  -     # Certificate "OISTE WISeKey Global Root GA CA"
  -     # Certificate "Certigna"
  -     # Certificate "ePKI Root Certification Authority"
  -     # Certificate "certSIGN ROOT CA"
  -     # Certificate "NetLock Arany (Class Gold) Főtanúsítvány"
  -     # Certificate "SecureSign RootCA11"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "GlobalSign Root CA - R3"
  -     # Certificate "Go Daddy Root Certificate Authority - G2"
  -     # Certificate "Starfield Root Certificate Authority - G2"
  -     # Certificate "Starfield Services Root Certificate Authority - G2"
  -     # Certificate "AffirmTrust Commercial"
  -     # Certificate "AffirmTrust Networking"
  -     # Certificate "AffirmTrust Premium"
  -     # Certificate "AffirmTrust Premium ECC"
  -     # Certificate "Certum Trusted Network CA"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "Security Communication RootCA2"
  -     # Certificate "Actalis Authentication Root CA"
  -     # Certificate "D-TRUST Root Class 3 CA 2 2009"
  -     # Certificate "D-TRUST Root Class 3 CA 2 EV 2009"
  -     # Certificate "CA Disig Root R2"
  -     # Certificate "ACCVRAIZ1"
  -     # Certificate "TWCA Global Root CA"
  -     # Certificate "TeliaSonera Root CA v1"
  -     # Certificate "Atos TrustedRoot 2011"
  -     # Certificate "QuoVadis Root CA 1 G3"
  -     # Certificate "QuoVadis Root CA 2 G3"
  -     # Certificate "QuoVadis Root CA 3 G3"
  -     # Certificate "DigiCert Assured ID Root G2"
  -     # Certificate "DigiCert Assured ID Root G3"
  -     # Certificate "DigiCert Global Root G2"
  -     # Certificate "DigiCert Global Root G3"
  -     # Certificate "DigiCert Trusted Root G4"
  -     # Certificate "COMODO RSA Certification Authority"
  -     # Certificate "USERTrust RSA Certification Authority"
  -     # Certificate "USERTrust ECC Certification Authority"
  -     # Certificate "GlobalSign ECC Root CA - R5"
  -     # Certificate "IdenTrust Commercial Root CA 1"
  -     # Certificate "Entrust Root Certification Authority - G2"
  -     # Certificate "Entrust Root Certification Authority - EC1"
  -     # Certificate "CFCA EV ROOT"
  -     # Certificate "OISTE WISeKey Global Root GB CA"
  -     # Certificate "Certum Trusted Network CA 2"
  -     # Certificate "Hellenic Academic and Research Institutions RootCA 2015"
  -     # Certificate "Hellenic Academic and Research Institutions ECC RootCA 2015"
  -     # Certificate "AC RAIZ FNMT-RCM"
  -     # Certificate "Amazon Root CA 2"
  -     # Certificate "Amazon Root CA 4"
  -     # Certificate "GDCA TrustAUTH R5 ROOT"
  -     # Certificate "SSL.com Root Certification Authority RSA"
  -     # Certificate "SSL.com Root Certification Authority ECC"
  -     # Certificate "SSL.com EV Root Certification Authority RSA R2"
  -     # Certificate "SSL.com EV Root Certification Authority ECC"
  -     # Certificate "GlobalSign Root CA - R6"
  -     # Certificate "OISTE WISeKey Global Root GC CA"
  -     # Certificate "UCA Global G2 Root"
  -     # Certificate "UCA Extended Validation Root"
  -     # Certificate "Certigna Root CA"
  -     # Certificate "emSign ECC Root CA - G3"
  -     # Certificate "emSign ECC Root CA - C3"
  -     # Certificate "Entrust Root Certification Authority - G4"
  -     # Certificate "e-Szigno Root CA 2017"
  -     # Certificate "Trustwave Global Certification Authority"
  -     # Certificate "Trustwave Global ECC P256 Certification Authority"
  -     # Certificate "Trustwave Global ECC P384 Certification Authority"
  -     # Certificate "Certum EC-384 CA"
  -     # Certificate "Certum Trusted Root CA"
  -     # Certificate "GlobalSign ECC Root CA - R4"
  -     # Certificate "Security Communication RootCA3"
  -     # Certificate "Security Communication ECC RootCA1"
  - removed certificates:
  -     # Certificate "Security Communication Root CA"
  -     # Certificate "Camerfirma Chambers of Commerce Root"
  -     # Certificate "Hongkong Post Root CA 1"
  -     # Certificate "Chambers of Commerce Root - 2008"
  -     # Certificate "Global Chambersign Root - 2008"
  -     # Certificate "E-Tugra Certification Authority"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "Certification Authority of WoSign G2"
  -     # Certificate "CA WoSign ECC Root"
  -     # Certificate "A-Trust-Root-05"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Certification Authority of WoSign"
  -     # Certificate "CA 沃通根证书"
  -     # Certificate "ADOCA02"
  -     # Certificate "StartCom Certification Authority G2"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
  -     # Certificate "LuxTrust Global Root"
  -     # Certificate "AC1 RAIZ MTIN"
  -     # Certificate "CCA India 2011"
  -     # Certificate "China Internet Network Information Center EV Certificates Root"
  -     # Certificate "SITHS CA v3"
  -     # Certificate "ANF Server CA"
  -     # Certificate "KEYNECTIS ROOT CA"
  -     # Certificate "I.CA - Standard Certification Authority, 09/2009"
  -     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
  -     # Certificate "VI Registru Centras RCSC (RootCA)"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
  -     # Certificate "Actalis Authentication CA G1"
  -     # Certificate "A-Trust-Qual-03"
  -     # Certificate "AddTrust External CA Root"
  -     # Certificate "StartCom Certification Authority"
  -     # Certificate "CNNIC ROOT"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "CA Disig"
  -     # Certificate "I.CA - Qualified root certificate"
  -     # Certificate "I.CA - Standard root certificate"
  -     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
  -     # Certificate "Japanese Government"
  -     # Certificate "AdminCA-CD-T01"
  -     # Certificate "Admin-Root-CA"
  -     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
  -     # Certificate "Halcom CA FO"
  -     # Certificate "Halcom CA PO 2"
  -     # Certificate "ACNLB"
  -     # Certificate "state-institutions"
  -     # Certificate "D-TRUST Root Class 2 CA 2007"
  -     # Certificate "D-TRUST Root Class 3 CA 2007"
  -     # Certificate "Root CA Generalitat Valenciana"
  -     # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "ANCERT Certificados CGN"
  -     # Certificate "ANCERT Certificados Notariales"
  -     # Certificate "ANCERT Corporaciones de Derecho Publico"
  -     # Certificate "Certipost E-Trust Primary Qualified CA"
  -     # Certificate "Certipost E-Trust Primary Normalised CA"
  -     # Certificate "Cybertrust Global Root"
  -     # Certificate "IGC/A"
  -     # Certificate "Microsec e-Szigno Root CA"
  -     # Certificate "LGPKI"
  -     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
  -     # Certificate "Staat der Nederlanden Root CA"
  -     # Certificate "Juur-SK"
  -     # Certificate "Global Chambersign Root"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Global CA 2"
  -     # Certificate "QuoVadis Root Certification Authority"
  -     # Certificate "Sonera Class2 CA"
  -     # Certificate "VeriSign, Inc."
  -     # Certificate "Microsoft Root Authority"
  -     # Certificate "Microsoft Root Certificate Authority"
  -     # Certificate "GTE CyberTrust Global Root"
  -     # Certificate "Thawte Server CA"
  -     # Certificate "Thawte Premium Server CA"
  -     # Certificate "Equifax Secure Global eBusiness CA-1"
  -     # Certificate "Equifax"
  -     # Certificate "Class 1 Primary CA"
  -     # Certificate "UTN-USERFirst-Object"
  -     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
  -     # Certificate "E-Tugra Global Root CA RSA v3"
  -     # Certificate "E-Tugra Global Root CA ECC v3"
  -     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
  - added certificates:
  -     # Certificate "LAWtrust Root CA2 (4096)"
  -     # Certificate "Sectigo Public Email Protection Root E46"
  -     # Certificate "Sectigo Public Email Protection Root R46"
  -     # Certificate "Sectigo Public Server Authentication Root E46"
  -     # Certificate "Sectigo Public Server Authentication Root R46"
  -     # Certificate "SSL.com TLS RSA Root CA 2022"
  -     # Certificate "SSL.com TLS ECC Root CA 2022"
  -     # Certificate "SSL.com Client ECC Root CA 2022"
  -     # Certificate "SSL.com Client RSA Root CA 2022"
  -     # Certificate "Atos TrustedRoot Root CA ECC G2 2020"
  -     # Certificate "Atos TrustedRoot Root CA RSA G2 2020"
  -     # Certificate "Atos TrustedRoot Root CA ECC TLS 2021"
  -     # Certificate "Atos TrustedRoot Root CA RSA TLS 2021"
  -     # Certificate "TrustAsia Global Root CA G3"
  -     # Certificate "TrustAsia Global Root CA G4"
  -     # Certificate "CommScope Public Trust ECC Root-01"
  -     # Certificate "CommScope Public Trust ECC Root-02"
  -     # Certificate "CommScope Public Trust RSA Root-01"
  -     # Certificate "CommScope Public Trust RSA Root-02"
  -     # Certificate "D-Trust SBR Root CA 1 2022"
  -     # Certificate "D-Trust SBR Root CA 2 2022"
  -     # Certificate "Telekom Security SMIME ECC Root 2021"
  -     # Certificate "Telekom Security TLS ECC Root 2020"
  -     # Certificate "Telekom Security SMIME RSA Root 2023"
  -     # Certificate "Telekom Security TLS RSA Root 2023"
  -     # Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
  - remove duplicated certificate record:
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"


